#tools
#Red_Team

+ Tool to start processes as SYSTEM using token duplication

https://github.com/magnusstubman/tokenduplicator
+ Splunk Attack Range 2.0

https://www.splunk.com/en_us/blog/security/introducing-splunk-attack-range-v2-0.html

https://github.com/splunk/attack_range

@BlueRedTeam

#Red_Team

​​Abusing forgotten permissions on computer objects in Active Directory

https://dirkjanm.io/abusing-forgotten-permissions-on-precreated-computer-objects-in-active-directory

@BlueRedTeam

#Red_Team

Scripts that i can leverage on Red Team Engagements

https://github.com/nickgobern/Bad_Boy_Scripts

@BlueRedTeam

#Cobalt_Strike

Miscellaneous Cobalt Strike Beacon Object Files

https://github.com/Cobalt-Strike/sleep_python_bridge

@BlueRedTeam

#Cobalt_Strike

​​Crypt-Cobalt-Strike-Powershell

Privat crypt Cobalt Strike and powershell

https://github.com/trewisscotch/Crypt-Cobalt-Strike-Powershell

@BlueRedTeam

#Red_Team

Bank Security
https://github.com/BankSecurity/Red_Team

@BlueRedTeam

#Red_Team

Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL). Mangle can remove known Indicators of Compromise (IoC) based strings and replace them with random characters, change the file by inflating the size to avoid EDRs, and can clone code-signing certs from legitimate files. In doing so, Mangle helps loaders evade on-disk and in-memory scanners.

https://github.com/optiv/Mangle

@BlueRedTeam

#Cobalt_Strike

Detect and respond to Cobalt Strike beacons using ETW.

https://github.com/3lp4tr0n/BeaconHunter

@BlueRedTeam

#Red_Team

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red Team operations, Bug Bounty and more

https://github.com/edoardottt/awesome-hacker-search-engines

@BlueRedTeam

#Red_Team

​​SharpSniper

Often a Red Team engagement is more than just achieving Domain Admin. Some clients will want to see if specific users in the domain can be compromised, for example the CEO.

SharpSniper is a simple tool to find the IP address of these users so that you can target their box.

It requires that you have privileges to read logs on Domain Controllers.

First it queries and makes a list of Domain contollers, then search for Log-on events on any of the DCs for the user you are looking for and then reads the most recent DHCP allocated logon IP address.

https://github.com/HunnicCyber/SharpSniper

@BlueRedTeam

#Red_Team

HacktheBox Synack Red Team Assessment Writeups | Host | Web | Mobile

https://github.com/htbpro/HacktheBox-Synack-Red-Team-Assessment-Writeups-Host-Web-Mobile

@BlueRedTeam

#Cobalt_Strike

​​kernel-mii

Cobalt Strike Beacon Object File foundation for kernel exploitation using CVE-2021-21551.

This is a Cobalt Strike (CS) Beacon Object File (BOF) which exploits CVE-2021-21551. It only overwrites the beacon process token with the system process token. But this BOF is mostly just a good foundation for further kernel exploitation via CS.

https://github.com/tijme/kernel-mii

@BlueRedTeam

#CVE-2022

CVE-2022-24500 Windows SMB Remote Code Execution Vulnerability

https://github.com/Daro1967/CVE-2022-24500-RCE

@BlueRedTeam

#webshell

webshell_detect

https://github.com/webraybtl/webshell_detect

@BlueRedTeam

#CVE-2022

PoC for CVE-2022-23614 (Twig sort filter code execution)

https://github.com/davwwwx/CVE-2022-23614

@BlueRedTeam

#CVE-2022

Verifed Proof of Concept on CVE-2022-24086 RCE

https://github.com/Cory65/CVE-2022-24086-POC

@BlueRedTeam

#Cobalt_Strike

kernel-mii

Cobalt Strike Beacon Object File foundation for kernel exploitation using CVE-2021-21551.

This is a Cobalt Strike (CS) Beacon Object File (BOF) which exploits CVE-2021-21551. It only overwrites the beacon process token with the system process token. But this BOF is mostly just a good foundation for further kernel exploitation via CS.

https://github.com/NorthwaveSecurity/kernel-mii


@BlueRedTeam

#Red_Team

Red Team Server (RTS)

https://github.com/silviatofana/react-and-redux

@BlueRedTeam

#Red_Team

Red Team infrastructure as code to perform local pentesting

https://github.com/N1neKitsune/_

@BlueRedTeam

#Cobalt_Strike

C2 Profiles for Cobalt Strike

https://github.com/OrneLibrary/Carcosa

@BlueRedTeam

#Red_Team

Red Team Infrastructure As Code

https://github.com/N1neKitsune/Phoenix

@BlueRedTeam