#Cobalt_Strike

​​kernel-mii

Cobalt Strike Beacon Object File foundation for kernel exploitation using CVE-2021-21551.

This is a Cobalt Strike (CS) Beacon Object File (BOF) which exploits CVE-2021-21551. It only overwrites the beacon process token with the system process token. But this BOF is mostly just a good foundation for further kernel exploitation via CS.

https://github.com/tijme/kernel-mii

@BlueRedTeam

#CVE-2022

CVE-2022-24500 Windows SMB Remote Code Execution Vulnerability

https://github.com/Daro1967/CVE-2022-24500-RCE

@BlueRedTeam

#webshell

webshell_detect

https://github.com/webraybtl/webshell_detect

@BlueRedTeam

#CVE-2022

PoC for CVE-2022-23614 (Twig sort filter code execution)

https://github.com/davwwwx/CVE-2022-23614

@BlueRedTeam

#CVE-2022

Verifed Proof of Concept on CVE-2022-24086 RCE

https://github.com/Cory65/CVE-2022-24086-POC

@BlueRedTeam

#Cobalt_Strike

kernel-mii

Cobalt Strike Beacon Object File foundation for kernel exploitation using CVE-2021-21551.

This is a Cobalt Strike (CS) Beacon Object File (BOF) which exploits CVE-2021-21551. It only overwrites the beacon process token with the system process token. But this BOF is mostly just a good foundation for further kernel exploitation via CS.

https://github.com/NorthwaveSecurity/kernel-mii


@BlueRedTeam

#Red_Team

Red Team Server (RTS)

https://github.com/silviatofana/react-and-redux

@BlueRedTeam

#Red_Team

Red Team infrastructure as code to perform local pentesting

https://github.com/N1neKitsune/_

@BlueRedTeam

#Cobalt_Strike

C2 Profiles for Cobalt Strike

https://github.com/OrneLibrary/Carcosa

@BlueRedTeam

#Red_Team

Red Team Infrastructure As Code

https://github.com/N1neKitsune/Phoenix

@BlueRedTeam

#Red_Team

Red Team noscripts written in python

https://github.com/paulkon68/Ethical_Hacking

@BlueRedTeam

#Red_Team

Weaponizing Carbon Lang for Red Team operation

https://github.com/ArchonLabs/Offensive-Carbon

@BlueRedTeam

#Red_Team

Rapid Deployment Infrastructure for Red Teaming and Penetration Testing

https://github.com/SamuNoSignal/BetterDiscord-ClearVisionThemeDOOMStyle

@BlueRedTeam

#Red_Team

+ Pivoting For Pentesters
https://www.stevencampbell.info/Pivoting-for-pentesters
+ AMSI Bypass - Memory Patching
https://aidenpearce369.github.io/offsec/AMSI-Memory-Bypass
+ Meterpreter injection technique using C# that attempts to bypass WD
https://github.com/Bl4ckM1rror/ZombieThread

@BlueRedTeam

#Blue_Team

Yaramail - Python package and CLI utility for scanning emails with YARA rules
https://seanthegeek.github.io/yaramail

@BlueRedTeam

#Red_Team

+ No-Fix LPE Using KrbRelay With Shadow Credentials
https://icyguider.github.io/2022/05/19/NoFix-LPE-Using-KrbRelay-With-Shadow-Credentials.html
+ Recreating an ISO Payload
https://blog.sunggwanchoi.com/recreating-an-iso-payload-for-fun-and-no-profit

@BlueRedTeam

#Red_Team
+ AddExeImport - Add a hardcoded DLL dependency to any EXE
https://www.x86matthew.com/view_post?id=add_exe_import
+ Red Unlock - Microcode Decryptor
https://github.com/chip-red-pill/MicrocodeDecryptor

@BlueRedTeam

#Blue_Team

+ The Threat Hunting Process
https://kostas-ts.medium.com/threat-hunting-series-the-threat-hunting-process-f76583f2475b
+ Analysis of a trojanized jQuery noscript: GootLoader unleashed
https://blog.nviso.eu/2022/07/20/analysis-of-a-trojanized-jquery-noscript-gootloader-unleashed

@BlueRedTeam

#Red_Team

+ Instagram App Access Token
https://philippeharewood.com/instagram-app-access-token
+ Bypass Url Parser
https://github.com/laluka/bypass-url-parser
+ MIFARE Cracking
https://arkandas.com/blog/mifare_classic_cracking

@BlueRedTeam

#Blue_Team

+ Access Checking Active Directory
https://www.tiraniddo.dev/2022/07/access-checking-active-directory.html
+ Quick browse through Windows evtx event logs & export to xml
https://github.com/kacos2000/Evtx_Log_Browser

@BlueRedTeam

#Red_Team

Assessment, Analysis, and Hardening of a vulnerable system. This report includes a Red Team Security Assessment, a Blue Team Log Analysis, and Hardening and Mitigation Strategies.

https://github.com/Bryanmillan/Red-vs-Blue-Team-Project

@BlueRedTeam