#CVE-2022-28776

Any App Can Install Any App In The Galaxy App Store

https://labs.f-secure.com/advisories/samsung-galaxy-any-app-can-install-any-app/

@BlueRedTeam

#webshell

Making webshell and terminal supports trzsz ( trz / tsz ), which similar to rz / sz, and compatible with tmux.

https://github.com/trzsz/trzsz.js

@BlueRedTeam

#Red_Team

For this project, I worked on a Red Team vs. Blue Team scenario in which I played the role of both pentester and SOC analyst.

https://github.com/Jtullis316/Red-Team-vs-Blue-Team

@BlueRedTeam

#tools
#Red_Team

MalSCCM - tool allows you to abuse local/remote SCCM servers to deploy malicious applications to hosts they manage
https://github.com/nettitude/MalSCCM
]-> https://labs.nettitude.com/blog/introducing-malsccm

@BlueRedTeam

#Red_Team #Blue_Team

Red Team Vs Blue Team

@BlueRedTeam

Scheduled Task Tampering

In this post we will explore two approaches that can be used to achieve the same result: create or modify a scheduled task and execute it, without generating the relevant telemetry. First, we will explore how direct registry manipulation could be used to create or modify tasks and how this did not generate the usual entries in the eventlog. Finally, an alternative route based on tampering with the Task Scheduler ETW will be presented that will completely suppress most of logging related to the Task Scheduler.

https://labs.f-secure.com/blog/scheduled-task-tampering/

@BlueRedTeam

#Red_Team

Rust Windows Kernel Driver for Red Teamers

https://github.com/memN0ps/eagle-rs

@BlueRedTeam

#CVE-2022

PoC for CVE-2022-1388_F5_BIG-IP

https://github.com/sherlocksecurity/CVE-2022-1388_F5_BIG-IP

@BlueRedTeam

#CVE-2022

K23605346: BIG-IP iControl REST vulnerability CVE-2022-1388

https://github.com/numanturle/CVE-2022-1388

@BlueRedTeam

#CVE-2022

PoC for CVE-2022-1388_F5_BIG-IP

https://github.com/sherlocksecurity/CVE-2022-1388_F5_BIG-IP_RCE

@BlueRedTeam

#CVE-2022

batch scan CVE-2022-1388

https://github.com/yukar1z0e/CVE-2022-1388

@BlueRedTeam

#CVE-2022

CVE-2022-1388 F5 Big IP unauth remote code execution

https://github.com/Vulnmachines/F5-Big-IP-CVE-2022-1388

@BlueRedTeam

#Cobalt_Strike

pyCobaltHound is an Aggressor noscript extension for Cobalt Strike which aims to provide a deep integration between Cobalt Strike and Bloodhound.

https://github.com/NVISOsecurity/pyCobaltHound

@BlueRedTeam

#Cobalt_Strike

ShellCode Loader for MSF and Cobalt Strike

https://github.com/LDrakura/ShellCodeLoader

@BlueRedTeam

#CVE-2022

F5 BIG-IP RCE exploitation (CVE-2022-1388)

https://github.com/alt3kx/CVE-2022-1388_PoC

@BlueRedTeam

#CVE-2022

CVE-2022-1388 POC exploit

https://github.com/superzerosec/CVE-2022-1388

@BlueRedTeam

#CVE-2022

CVE-2022-26809 is a vulnerability in Remote Procedure Call Runtime

https://github.com/ExploitPwner/CVE-2022-26809-RCE-POC

@BlueRedTeam

#Red_Team

Hands on materials for the Red Team Project Meetup

https://github.com/redteam-project/meetup

@BlueRedTeam

#Red_Team

+ Abusing HTTP hop-by-hop request headers
https://nathandavison.com/blog/abusing-http-hop-by-hop-request-headers
+ A collection of GCP IAM privilege escalation methods
https://github.com/RhinoSecurityLabs/GCP-IAM-Privilege-Escalation

@BlueRedTeam