ExeSpy is a cross-platform PE viewer for EXE and DLL files

https://github.com/andyjsmith/Exe-Spy

@BlueRedTeam

#Red_Team

Red Team Mind Map

https://github.com/hassan0x/ReconHunter

@BlueRedTeam

#Cobalt_Strike

Helping to automate payload development, testing, Opsec checking, beacon tasking, and deployment for Cobalt Strike

https://github.com/turalalv/Payload-cob

@BlueRedTeam

#Red_Team

+ Grab unsaved Notepad contents with a Beacon Object File
https://github.com/tothi/NoteThief
+ Attacking With WebView2 Applications
https://mrd0x.com/attacking-with-webview2-applications
+ Marshmallows & Kerberoasting
https://redcanary.com/blog/marshmallows-and-kerberoasting

@BlueRedTeam

#Blue_Team

+ Smart context-based SSRF vulnerabiltiy scanner
https://github.com/Th0h0/autossrf
+ Total Registry - enhanced Registry editor/viewer
https://github.com/zodiacon/TotalRegistry

@BlueRedTeam

#Red_Team

Red Team, Blue Team, and Network Forensics

https://github.com/andresmadeddie/Security-Offensive-Defensive-Forensics

@BlueRedTeam

#Cobalt_Strike

Privat crypt Cobalt Strike and powershell

https://github.com/trewisscotch/Crypt-Cobalt-Strike-Powershell

@BlueRedTeam

#Red_Team
+ Mangle - tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs
https://github.com/optiv/Mangle
+ Extracting Whitelisted Paths from Windows Defender ASR Rules
https://adamsvoboda.net/extracting-asr-rules

@BlueRedTeam

#Blue_Team

+ Detecting Linux Anti-Forensics Log Tampering
https://www.inversecos.com/2022/06/detecting-linux-anti-forensics-log.html
+ Detecting the DFSCoerce attack
https://www.kustoking.com/detecting-the-dfscoerce-attack

@BlueRedTeam

#Red_Team

This repo contains a bash noscript \"PotOfDomains\" which is made to help me automate some Red Teaming Recon tasks.

https://github.com/l3pr3ch4un00/PotOfDomains

@BlueRedTeam

#Red_Team
Ad hoc collection of Red Teaming & Active Directory tooling

https://github.com/expl0itabl3/Toolies

@BlueRedTeam

#Cobalt_Strike

Useful aggressor noscripts for Cobalt Strike

https://github.com/nickzer0/AgressorScripts

@BlueRedTeam

#Red_Team

+ Embedding Payloads and Bypassing Controls in Microsoft InfoPath
https://spaceraccoon.dev/embedding-payloads-bypassing-controls-microsoft-infopath
+ Exploiting vulnerabilities in iOS Application
https://lonewolf-raj.medium.com/exploiting-vulnerabilities-in-ios-application-cf5718910c47

@BlueRedTeam

#Cobalt_Strike

Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.

https://github.com/tijme/kernel-mii

@BlueRedTeam

#Blue_Team

+ Detect and block Credential Dumps with Defender for Endpoint & Attack Surface Reduction
https://jeffreyappel.nl/detect-and-block-credential-dumps-with-defender-for-endpoint-attack-surface-reduction
+ Fuzzuli - url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain
https://github.com/musana/fuzzuli

@BlueRedTeam

#Red_Team

The Phantom Credentials of SCCM: Why the NAA Won’t Die
https://posts.specterops.io/the-phantom-credentials-of-sccm-why-the-naa-wont-die-332ac7aa1ab9

@BlueRedTeam

#Red_Team

AD Red Team Tools

https://github.com/jawadkazmi12/red-team-tools

@BlueRedTeam

#Red_Team

multi-purpose Red Team Assessment access and exploitation framework for exploitation C2, backdooring and defense mechanism evasion purposes on restricted enviroments

https://github.com/blueudp/backvenom

@BlueRedTeam

Hacking a Company with 0-Click Email Attack | #phishing #redteam

As a penetration tester or red teamer, one of the methods of breaking into a company is #phishing and using this 0-click phishing attack it is possible to grab a user's NetNTLMv2 hash which you can relay or crack to escalate privileges or move laterally through the network. This attack could be useful on a #redteam engagement.
YouTube
@DK_HBB2

#Red_Team

A collection of Script for Red Team & Incidence Response

https://github.com/Johnng007/Black-Widow

@BlueRedTeam

#Red_Team
+ Weaponizing and Abusing Hidden Functionalities Contained in Office Document Properties
https://www.offensive-security.com/offsec/macro-weaponization
+ Modular command-line tool to parse, create and manipulate JWT tokens
https://github.com/KINGSABRI/jwtear

@BlueRedTeam