#Red_Team

Hands on materials for the Red Team Project Meetup

https://github.com/redteam-project/meetup

@BlueRedTeam

#Red_Team

+ Abusing HTTP hop-by-hop request headers
https://nathandavison.com/blog/abusing-http-hop-by-hop-request-headers
+ A collection of GCP IAM privilege escalation methods
https://github.com/RhinoSecurityLabs/GCP-IAM-Privilege-Escalation

@BlueRedTeam

#Blue_Team

Detecting Hypervisor-assisted Hooking

https://momo5502.com/blog/?p=255

@BlueRedTeam

#CVE-2022

[Reserved For CVE-2022-29554]

https://github.com/ComparedArray/printix-CVE-2022-29554

@BlueRedTeam

#CVE-2022

BIG-IP iCONTROL REST AUTH BYPASS RCE POC CVE-2022-1388

https://github.com/TomArni680/CVE-2022-1388-POC

@BlueRedTeam

#CVE-2022

A Test API for testing the POC against CVE-2022-1388

https://github.com/bandit92/CVE2022-1388_TestAPI

@BlueRedTeam

#Red_Team

Red Teaming and Penetration Testing Checklist, Cheatsheet, Clicknoscript

https://github.com/ibr0wse/RedTeam-PenTest-Cheatsheet-Checklist

@BlueRedTeam

#webshell

Automatically create user email (SMTP / WEBMAIL) on webshell

https://github.com/biulove0x/CreateEmail-SMTP-WEBMAIL

@BlueRedTeam

#Red_Team
+ Exploiting IRCTC along with few other government domains through XXE
https://systemweakness.com/exploiting-irctc-along-with-few-other-government-domains-through-xxe-cd7a9ff698
+ ServiceMove-BOF:
Lateral movement technique by abusing Windows Perception Simulation Service
https://github.com/netero1010/ServiceMove-BOF
+ Protected Process Light (PPL) Attack
https://paper.seebug.org/1892/

@BlueRedTeam

#Blue_Team

Prioritizing ATT&CK Techniques
https://medium.com/mitre-engenuity/where-to-begin-prioritizing-att-ck-techniques-c535b50983f4
]-> Top ATT&CK Techniques - calculator:
https://top-attack-techniques.mitre-engenuity.org
]-> Methodology:
https://top-attack-techniques.mitre-engenuity.org/methodology

@BlueRedTeam

#Red_Team

I worked on a Red Team vs. Blue Team scenario in which I played the role of both penetration tester and SOC analyst.

https://github.com/Johnrhume/Redivivus-Inc.-e

@BlueRedTeam

#Red_Team

C2X-HTTP - C2/Post-Exploitation Tool For Red Teaming and Ethical Hacking [on HTTP(S)]

https://github.com/739156041qqx/nxenon7

@BlueRedTeam

#Blue_Team

Evicting the Adversary:
Guidance to kick out an active attacker in your environment

https://www.huntress.com/blog/evicting-the-adversary

@BlueRedTeam

#Red_Team

Anti-Reverse engineering-Framework written in Rust, to support Red Team Operators into evading detection.

https://github.com/ThottySploity/invyria

@BlueRedTeam

#CVE-2022

Testing CVE-2022-22968

https://github.com/MarcinGadz/spring-rce-poc

@BlueRedTeam

#Blue_Team

+ Detecting Active Directory Kerberos Attacks
https://www.splunk.com/en_us/blog/security/detecting-active-directory-kerberos-attacks-threat-research-release-march-2022.html
+ Generate Advanced YARA Rules Based on Code Reuse
https://www.intezer.com/blog/threat-hunting/yara-rules-minimize-false-positives

@BlueRedTeam

#Red_Team

A Detailed Guide on Rubeus

https://www.hackingarticles.in/a-detailed-guide-on-rubeus

]-> C# toolset for raw Kerberos interaction and abuses:

https://github.com/GhostPack/Rubeus

@BlueRedTeam

#Red_Team

List of tools that are commonly used in the field for Physical Security, Red Teaming, and Tactical Covert Entry.

https://github.com/0xOverflow/RedTeam-Physical-Tools


@BlueRedTeam

#Blue_Team

Set of EVTX samples mapped to MITRE ATT&CK tactic and techniques to measure your SIEM coverage or developed new use cases
https://github.com/mdecrevoisier/EVTX-to-MITRE-Attack

@BlueRedTeam

#Red_Team

+ Bypassing OpenSSH MaxAuthTries
https://www.whiteoaksecurity.com/blog/bypassing-openssh-maxauthtries
+ Exploitation of an SSRF vulnerability against EC2 IMDSv2
https://www.yassineaboukir.com/blog/exploitation-of-an-SSRF-vulnerability-against-EC2-IMDSv2

@BlueRedTeam

#Blue_Team

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software

https://github.com/github/advisory-database

@BlueRedTeam