#Blue_Team
AppArmor Basics for Sysadmins
https://tbhaxor.com/apparmor-basics-for-sysadmins
@BlueRedTeam
AppArmor Basics for Sysadmins
https://tbhaxor.com/apparmor-basics-for-sysadmins
@BlueRedTeam
tbhaxor's Blog
AppArmor Basics for Sysadmins
AppArmor is a very old kernel-level program resource confining technology that can be used to enforce the access controls and log the violations for further incident response. In this series get a detailed walkthrough on getting familiar with AppArmor
#Red_Team
Cybersecurity blog. Red Team, pentest, malware analysis and dev
https://github.com/Johnrhume/...Redivivus-Inc.
@BlueRedTeam
Cybersecurity blog. Red Team, pentest, malware analysis and dev
https://github.com/Johnrhume/...Redivivus-Inc.
@BlueRedTeam
#Red_Team
Tools for Active Directory Red Teaming (outdated)
https://github.com/michaelyamout/ad-red-team
@BlueRedTeam
Tools for Active Directory Red Teaming (outdated)
https://github.com/michaelyamout/ad-red-team
@BlueRedTeam
GitHub
GitHub - michaelyamout/ad-red-team: Tools for Active Directory Red Teaming (outdated)
Tools for Active Directory Red Teaming (outdated). Contribute to michaelyamout/ad-red-team development by creating an account on GitHub.
#Red_Team
Breakout from the Seccomp Unconfined Container
https://tbhaxor.com/breakout-from-seccomp-confined-container
@BlueRedTeam
Breakout from the Seccomp Unconfined Container
https://tbhaxor.com/breakout-from-seccomp-confined-container
@BlueRedTeam
#Blue_Team
+ Open Source Package Analysis
https://github.com/ossf/package-analysis
+ Detecting VSTO Office Files with ExifTool
https://isc.sans.edu/forums/diary/Detecting+VSTO+Office+Files+With+ExifTool/28604
@BlueRedTeam
+ Open Source Package Analysis
https://github.com/ossf/package-analysis
+ Detecting VSTO Office Files with ExifTool
https://isc.sans.edu/forums/diary/Detecting+VSTO+Office+Files+With+ExifTool/28604
@BlueRedTeam
GitHub
GitHub - ossf/package-analysis: Open Source Package Analysis
Open Source Package Analysis. Contribute to ossf/package-analysis development by creating an account on GitHub.
#Red_Team
Red Team vs. Blue Team scenario in which you play the role of both pentester and SOC analyst.
https://github.com/simysingh/RedTeam-vs-BlueTeam
@BlueRedTeam
Red Team vs. Blue Team scenario in which you play the role of both pentester and SOC analyst.
https://github.com/simysingh/RedTeam-vs-BlueTeam
@BlueRedTeam
GitHub
GitHub - simysingh/RedTeam-vs-BlueTeam: Red Team vs. Blue Team scenario in which you play the role of both pentester and SOC analyst.
Red Team vs. Blue Team scenario in which you play the role of both pentester and SOC analyst. - simysingh/RedTeam-vs-BlueTeam
#Red_Team
+ OSripper - AV evading OSX Backdoor and Crypter Framework
https://github.com/SubGlitch1/OSRipper
+ GatewayBleeding - Tools for attacks on FHRP domains
https://github.com/necreas1ng/GatewayBleeding
@BlueRedTeam
+ OSripper - AV evading OSX Backdoor and Crypter Framework
https://github.com/SubGlitch1/OSRipper
+ GatewayBleeding - Tools for attacks on FHRP domains
https://github.com/necreas1ng/GatewayBleeding
@BlueRedTeam
GitHub
GitHub - NoahOksuz/OSRipper: AV evading cross platform Backdoor and Crypter Framework with a integrated lightweight webUI
AV evading cross platform Backdoor and Crypter Framework with a integrated lightweight webUI - NoahOksuz/OSRipper
#Red_Team
BloodHound Inner Workings & Limitations: User Rights Enumeration Through SAMR & GPOLocalGroup
https://blog.compass-security.com/2022/05/bloodhound-inner-workings-part-1
@BlueRedTeam
BloodHound Inner Workings & Limitations: User Rights Enumeration Through SAMR & GPOLocalGroup
https://blog.compass-security.com/2022/05/bloodhound-inner-workings-part-1
@BlueRedTeam
#Blue_Team
Scheduled Task Tampering
https://labs.f-secure.com/blog/scheduled-task-tampering
@BlueRedTeam
Scheduled Task Tampering
https://labs.f-secure.com/blog/scheduled-task-tampering
@BlueRedTeam
#exploit
+ CVE-2022-1388:
BIG-IP F5 iControl REST vulnerability
https://github.com/numanturle/CVE-2022-1388
+ CVE-2022-1040:
Auth bypass and RCE in webmin portal of Sophos Firewall
https://github.com/cve-hunter/CVE-2022-1040-sophos-rce
@BlueRedTeam
+ CVE-2022-1388:
BIG-IP F5 iControl REST vulnerability
https://github.com/numanturle/CVE-2022-1388
+ CVE-2022-1040:
Auth bypass and RCE in webmin portal of Sophos Firewall
https://github.com/cve-hunter/CVE-2022-1040-sophos-rce
@BlueRedTeam
GitHub
GitHub - numanturle/CVE-2022-1388: K23605346: BIG-IP iControl REST vulnerability CVE-2022-1388
K23605346: BIG-IP iControl REST vulnerability CVE-2022-1388 - numanturle/CVE-2022-1388
#exploit
Hacking a Bank by Finding a 0day in DotCMS
https://blog.assetnote.io/2022/05/03/hacking-a-bank-using-dotcms-rce
@BlueRedTeam
Hacking a Bank by Finding a 0day in DotCMS
https://blog.assetnote.io/2022/05/03/hacking-a-bank-using-dotcms-rce
@BlueRedTeam
#tools
#Red_Team
+ AD CS: weaponizing the ESC7 attack
https://www.tarlogic.com/blog/ad-cs-esc7-attack
+ An other No-Fix LPE, NTLMRelay2Self over HTTP (Webdav)
https://github.com/med0x2e/NTLMRelay2Self
+ Tools for performing attacks on EIGRP domains
https://github.com/necreas1ng/EIGRPWN
@BlueRedTeam
#Red_Team
+ AD CS: weaponizing the ESC7 attack
https://www.tarlogic.com/blog/ad-cs-esc7-attack
+ An other No-Fix LPE, NTLMRelay2Self over HTTP (Webdav)
https://github.com/med0x2e/NTLMRelay2Self
+ Tools for performing attacks on EIGRP domains
https://github.com/necreas1ng/EIGRPWN
@BlueRedTeam
Tarlogic Security
AD CS: weaponizing the ESC7 attack
Research and tooling development around the ESC7 attack at Active Directory Certificate Services (AD CS) for Red Team operations
MDE_under_hood.pdf
3 MB
#Blue_Team
"Windows Defender for Endpoint:
Lifting the veil, a look at MDE under the hood"
@BlueRedTeam
"Windows Defender for Endpoint:
Lifting the veil, a look at MDE under the hood"
@BlueRedTeam
Google releases monthly security patches for Android with fixes for 37 vulnerabilities in various components, including a fix for an actively exploited vulnerability in the Linux kernel.
Details: https://thehackernews.com/2022/05/google-releases-android-update-to-patch.html
Details: https://thehackernews.com/2022/05/google-releases-android-update-to-patch.html