#Red_Team

A collection of Script for Red Team & Incidence Response

https://github.com/Johnng007/Black-Widow

@BlueRedTeam

#Red_Team
+ Weaponizing and Abusing Hidden Functionalities Contained in Office Document Properties
https://www.offensive-security.com/offsec/macro-weaponization
+ Modular command-line tool to parse, create and manipulate JWT tokens
https://github.com/KINGSABRI/jwtear

@BlueRedTeam

#exploit
+ CVE-2022-28219:
Unauthenticated XXE to RCE and Domain Compromise in ManageEngine ADAudit Plus
https://www.horizon3.ai/red-team-blog-cve-2022-28219

+ CVE-2022-28117:
Navigate CMS <= 2.9.4 - Server-Side Request Forgery (Authenticated)
https://github.com/cheshireca7/CVE-2022-28117

+ PDF Exploit
https://github.com/CodiumAlgorithm/Silent-PDF-Exploit-Builder-2022---PDF-Exploits

@BlueRedTeam

#CVE-2022

PoC for CVE-2022-24342: account takeover via CSRF in GitHub authentication

https://github.com/yuriisanin/CVE-2022-24342

@BlueRedTeam

#Red_Team

Red Teaming Active Directory

When delivering an advanced penetration test or red team exercise, we want our activities to look like normal actions. Not only we will be stealthy this way, but we will minimize the posssibilities of disrupting normal operations as well.

https://h4ms1k.github.io/Red_Team_Active_Directory/

@BlueRedTeam

#CVE-2022

A Simple bash noscript that patches the CVE-2022-0847 (dirty pipe) kernel vulnerability on Debian 11

https://github.com/ih3na/debian11-dirty_pipe-patcher

@BlueRedTeam

#CVE-2022

metasploit and python module for CVE-2022-26809 windows rpc rce via smb 445

https://github.com/Ziggy78/CVE-2022-26809-RCE

@BlueRedTeam

#Red_Team

Web Hacking and Red Teaming MindMap

https://github.com/N1arut/Pentesting-Mind-Map

@BlueRedTeam

#Red_Team
+ Trick the seclogon service to open a handle to LSASS and duplicate it before it is closed
https://github.com/helpsystems/nanodump/commit/c890da208511bacb09f91c68b935915821f4f0f0
+ Web Cache Deception Attacks
https://securitycafe.ro/2022/07/01/web-cache-deception-attacks

@BlueRedTeam

#CVE-2022

CVE-2022-29464 Exploit

https://github.com/Pasch0/WSO2RCE

@BlueRedTeam

#CVE-2022

An eBPF detection program for CVE-2022-0847

https://github.com/airbus-cert/dirtypipe-ebpf_detection

@BlueRedTeam

#Cobalt_Strike

Public variation of Titan Loader. Tweaks Cobalt Strike's behavior with Import Address Table Hooks

https://github.com/SecIdiot/TitanLdr

@BlueRedTeam

#Red_Team

​Red-Teaming-TTPs

Free Resources to Practice

https://github.com/RoseSecurity/Red-Teaming-TTPs

@BlueRedTeam

#Red_Team

Red Teaming & Active Directory Cheat Sheet

https://github.com/expl0itabl3/Redsheet

@BlueRedTeam

#Red_Team

Red Team Stuffs

https://github.com/6vr/Red-Team-Tips

@BlueRedTeam

#getshell

S2-061 getshell

https://github.com/nevermo0re/S2-061

@BlueRedTeam

#Cobalt_Strike

Cobalt Strike Beacon Object File (BOF) that uses WinStationConnect API to perform local/remote RDP session hijacking.

https://github.com/netero1010/RDPHijack-BOF

@BlueRedTeam

#Red_Team
Scripts to set up Red Team practice labs.

https://github.com/idchoppers/rtsetup

@BlueRedTeam

#Red_Team
Red Team Project Repo

https://github.com/Jarney903/Red-ProjectHub

@BlueRedTeam

#Cobalt_Strike

Cobalt Strike BOF Files with Nim!

https://github.com/byt3bl33d3r/BOF-Nim

@BlueRedTeam

#Cobalt_Strike

RDLL for Cobalt Strike beacon to silence sysmon process

https://github.com/ScriptIdiot/SysmonQuiet

@BlueRedTeam