#Blue_Team

+ Detect and block Credential Dumps with Defender for Endpoint & Attack Surface Reduction
https://jeffreyappel.nl/detect-and-block-credential-dumps-with-defender-for-endpoint-attack-surface-reduction
+ Fuzzuli - url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain
https://github.com/musana/fuzzuli

@BlueRedTeam

#Red_Team

The Phantom Credentials of SCCM: Why the NAA Won’t Die
https://posts.specterops.io/the-phantom-credentials-of-sccm-why-the-naa-wont-die-332ac7aa1ab9

@BlueRedTeam

#Red_Team

AD Red Team Tools

https://github.com/jawadkazmi12/red-team-tools

@BlueRedTeam

#Red_Team

multi-purpose Red Team Assessment access and exploitation framework for exploitation C2, backdooring and defense mechanism evasion purposes on restricted enviroments

https://github.com/blueudp/backvenom

@BlueRedTeam

Hacking a Company with 0-Click Email Attack | #phishing #redteam

As a penetration tester or red teamer, one of the methods of breaking into a company is #phishing and using this 0-click phishing attack it is possible to grab a user's NetNTLMv2 hash which you can relay or crack to escalate privileges or move laterally through the network. This attack could be useful on a #redteam engagement.
YouTube
@DK_HBB2

#Red_Team

A collection of Script for Red Team & Incidence Response

https://github.com/Johnng007/Black-Widow

@BlueRedTeam

#Red_Team
+ Weaponizing and Abusing Hidden Functionalities Contained in Office Document Properties
https://www.offensive-security.com/offsec/macro-weaponization
+ Modular command-line tool to parse, create and manipulate JWT tokens
https://github.com/KINGSABRI/jwtear

@BlueRedTeam

#exploit
+ CVE-2022-28219:
Unauthenticated XXE to RCE and Domain Compromise in ManageEngine ADAudit Plus
https://www.horizon3.ai/red-team-blog-cve-2022-28219

+ CVE-2022-28117:
Navigate CMS <= 2.9.4 - Server-Side Request Forgery (Authenticated)
https://github.com/cheshireca7/CVE-2022-28117

+ PDF Exploit
https://github.com/CodiumAlgorithm/Silent-PDF-Exploit-Builder-2022---PDF-Exploits

@BlueRedTeam

#CVE-2022

PoC for CVE-2022-24342: account takeover via CSRF in GitHub authentication

https://github.com/yuriisanin/CVE-2022-24342

@BlueRedTeam

#Red_Team

Red Teaming Active Directory

When delivering an advanced penetration test or red team exercise, we want our activities to look like normal actions. Not only we will be stealthy this way, but we will minimize the posssibilities of disrupting normal operations as well.

https://h4ms1k.github.io/Red_Team_Active_Directory/

@BlueRedTeam

#CVE-2022

A Simple bash noscript that patches the CVE-2022-0847 (dirty pipe) kernel vulnerability on Debian 11

https://github.com/ih3na/debian11-dirty_pipe-patcher

@BlueRedTeam

#CVE-2022

metasploit and python module for CVE-2022-26809 windows rpc rce via smb 445

https://github.com/Ziggy78/CVE-2022-26809-RCE

@BlueRedTeam

#Red_Team

Web Hacking and Red Teaming MindMap

https://github.com/N1arut/Pentesting-Mind-Map

@BlueRedTeam

#Red_Team
+ Trick the seclogon service to open a handle to LSASS and duplicate it before it is closed
https://github.com/helpsystems/nanodump/commit/c890da208511bacb09f91c68b935915821f4f0f0
+ Web Cache Deception Attacks
https://securitycafe.ro/2022/07/01/web-cache-deception-attacks

@BlueRedTeam

#CVE-2022

CVE-2022-29464 Exploit

https://github.com/Pasch0/WSO2RCE

@BlueRedTeam

#CVE-2022

An eBPF detection program for CVE-2022-0847

https://github.com/airbus-cert/dirtypipe-ebpf_detection

@BlueRedTeam

#Cobalt_Strike

Public variation of Titan Loader. Tweaks Cobalt Strike's behavior with Import Address Table Hooks

https://github.com/SecIdiot/TitanLdr

@BlueRedTeam

#Red_Team

​Red-Teaming-TTPs

Free Resources to Practice

https://github.com/RoseSecurity/Red-Teaming-TTPs

@BlueRedTeam

#Red_Team

Red Teaming & Active Directory Cheat Sheet

https://github.com/expl0itabl3/Redsheet

@BlueRedTeam

#Red_Team

Red Team Stuffs

https://github.com/6vr/Red-Team-Tips

@BlueRedTeam

#getshell

S2-061 getshell

https://github.com/nevermo0re/S2-061

@BlueRedTeam