#CVE-2022

PoC for CVE-2022-1388_F5_BIG-IP

https://github.com/sherlocksecurity/CVE-2022-1388_F5_BIG-IP_RCE

@BlueRedTeam

#CVE-2022

batch scan CVE-2022-1388

https://github.com/yukar1z0e/CVE-2022-1388

@BlueRedTeam

#CVE-2022

CVE-2022-1388 F5 Big IP unauth remote code execution

https://github.com/Vulnmachines/F5-Big-IP-CVE-2022-1388

@BlueRedTeam

#Cobalt_Strike

pyCobaltHound is an Aggressor noscript extension for Cobalt Strike which aims to provide a deep integration between Cobalt Strike and Bloodhound.

https://github.com/NVISOsecurity/pyCobaltHound

@BlueRedTeam

#Cobalt_Strike

ShellCode Loader for MSF and Cobalt Strike

https://github.com/LDrakura/ShellCodeLoader

@BlueRedTeam

#CVE-2022

F5 BIG-IP RCE exploitation (CVE-2022-1388)

https://github.com/alt3kx/CVE-2022-1388_PoC

@BlueRedTeam

#CVE-2022

CVE-2022-1388 POC exploit

https://github.com/superzerosec/CVE-2022-1388

@BlueRedTeam

#CVE-2022

CVE-2022-26809 is a vulnerability in Remote Procedure Call Runtime

https://github.com/ExploitPwner/CVE-2022-26809-RCE-POC

@BlueRedTeam

#Red_Team

Hands on materials for the Red Team Project Meetup

https://github.com/redteam-project/meetup

@BlueRedTeam

#Red_Team

+ Abusing HTTP hop-by-hop request headers
https://nathandavison.com/blog/abusing-http-hop-by-hop-request-headers
+ A collection of GCP IAM privilege escalation methods
https://github.com/RhinoSecurityLabs/GCP-IAM-Privilege-Escalation

@BlueRedTeam

#Blue_Team

Detecting Hypervisor-assisted Hooking

https://momo5502.com/blog/?p=255

@BlueRedTeam

#CVE-2022

[Reserved For CVE-2022-29554]

https://github.com/ComparedArray/printix-CVE-2022-29554

@BlueRedTeam

#CVE-2022

BIG-IP iCONTROL REST AUTH BYPASS RCE POC CVE-2022-1388

https://github.com/TomArni680/CVE-2022-1388-POC

@BlueRedTeam

#CVE-2022

A Test API for testing the POC against CVE-2022-1388

https://github.com/bandit92/CVE2022-1388_TestAPI

@BlueRedTeam

#Red_Team

Red Teaming and Penetration Testing Checklist, Cheatsheet, Clicknoscript

https://github.com/ibr0wse/RedTeam-PenTest-Cheatsheet-Checklist

@BlueRedTeam

#webshell

Automatically create user email (SMTP / WEBMAIL) on webshell

https://github.com/biulove0x/CreateEmail-SMTP-WEBMAIL

@BlueRedTeam

#Red_Team
+ Exploiting IRCTC along with few other government domains through XXE
https://systemweakness.com/exploiting-irctc-along-with-few-other-government-domains-through-xxe-cd7a9ff698
+ ServiceMove-BOF:
Lateral movement technique by abusing Windows Perception Simulation Service
https://github.com/netero1010/ServiceMove-BOF
+ Protected Process Light (PPL) Attack
https://paper.seebug.org/1892/

@BlueRedTeam

#Blue_Team

Prioritizing ATT&CK Techniques
https://medium.com/mitre-engenuity/where-to-begin-prioritizing-att-ck-techniques-c535b50983f4
]-> Top ATT&CK Techniques - calculator:
https://top-attack-techniques.mitre-engenuity.org
]-> Methodology:
https://top-attack-techniques.mitre-engenuity.org/methodology

@BlueRedTeam

#Red_Team

I worked on a Red Team vs. Blue Team scenario in which I played the role of both penetration tester and SOC analyst.

https://github.com/Johnrhume/Redivivus-Inc.-e

@BlueRedTeam

#Red_Team

C2X-HTTP - C2/Post-Exploitation Tool For Red Teaming and Ethical Hacking [on HTTP(S)]

https://github.com/739156041qqx/nxenon7

@BlueRedTeam

#Blue_Team

Evicting the Adversary:
Guidance to kick out an active attacker in your environment

https://www.huntress.com/blog/evicting-the-adversary

@BlueRedTeam