#Red_Team

Some Cheat Sheet for Red Team

https://github.com/irredteam/irredteam.github.io

@BlueRedTeam

#Cobalt_Strike

An aggressor noscript for Cobalt Strike to query Windows' GetLastError messages

https://github.com/Henkru/cs-get-last-error

@BlueRedTeam

#Red_Team

HacktheBox Synack Red Team Assessment Writeups | Host | Web | Mobile

https://github.com/tiber10/Italian-Collegiate-Programming-Contest-2022

@BlueRedTeam

#Red_Team

Offensive Security | Red Team

https://github.com/DFIRSECPublicLibrary/Atomic-Red-Team-Plans

@BlueRedTeam

#Cobalt_Strike

An aggressor noscript for Cobalt Strike to query Windows' GetLastError messages

https://github.com/CrossC2/CrossC2Kit

@BlueRedTeam

#PurpleTeam

CLI component of #OWASP PurpleTeam.

https://github.com/purpleteam-labs/purpleteam

@BlueRedTeam

#Red_Team

List of Awesome Red Team / Red Teaming Resources This list is for anyone wishing to learn about Red Teaming but do not have a starting point.

https://github.com/0xMrNiko/Awesome-Red-Teaming

@BlueRedTeam

#Red_Team

Automation For Metova Range Global Internet system Red Team Infastructure

https://github.com/chipmanfu/RGI-redteam-noscripts

@BlueRedTeam

#Blue_Team
Elastic Security detection content for Endpoint
https://github.com/elastic/protections-artifacts

@BlueRedTeam

#Cobalt_Strike
Public variation of Titan Loader. Tweaks Cobalt Strike's behavior with Import Address Table Hooks

https://github.com/SecIdiot/TitanLdr

@BlueRedTeam

#Red_Team
1. A python noscript that exploits wget when being set with a SUID bit, and overwrites the root password
https://github.com/CopernicusPY/wget-root
2. Abused RPC method allows privileged processes to access malicious pipes for exploitation
https://github.com/crisprss/magicNetdefs

@BlueRedTeam

#Red_Team
+ scan4all - 15000+ PoCs; 20 kinds of application password crack; 7000+ Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW
https://github.com/hktalent/scan4all
+ A compact guide to network pivoting for penetration testings/CTF challenges
https://github.com/t3l3machus/pentest-pivoting
+ Authentication Bypass Techniques using SQLi, PHP, XPath, and LDAP injection
https://oxasploits.com/posts/authentication-bypass-techniques-sqli-php-xpath-ldap-tricks

@BlueRedTeam

#Blue_Team
+ dnsReaper - subdomain takeover tool
https://github.com/punk-security/dnsReaper
+ Check if a PAN firewall is using the default master key when globalprotect is enabled
https://gist.github.com/rqu1/6175cb2972291fc9ac96ef18f72b792c

#webshell

Best webshell backdoor

https://github.com/Naughty-SEC/Shell-backdoor

@BlueRedTeam

#Cobalt_Strike

Original Cobalt Strike

https://github.com/sabareeshkumaresan/Cobalt_Strike_4.5_Orginal

@BlueRedTeam

#webshell

Free webshell detection solution

https://github.com/movptr06/Webshell-defender

@BlueRedTeam

#Cobalt_Strike

Cobalt Strike BOF Files with Nim!

https://github.com/byt3bl33d3r/BOF-Nim

@BlueRedTeam

#webshell

enterprise webshell CLI to obfuscate attack patterns

https://github.com/0x3van/roflcopter

@BlueRedTeam

#Red_Team

! UNDER CONSTRUCTION ! This repository contains cutting-edge open-source security notes and tools that will help you during your Red Team assessments.

https://github.com/0xsyr0/Red-Team-Playbooks

@BlueRedTeam

#Red_Team

Cyber Security Red Team and Blue Team

https://github.com/Telmosantana/Plano-de-Estudo-Cyber-Security

@BlueRedTeam

#Red_Team
+ Creating Processes Using System Calls
https://www.coresecurity.com/core-labs/articles/creating-processes-using-system-calls
]-> PoC: https://github.com/helpsystems/CreateProcess

+ Standalone MITM attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
https://github.com/kgretzky/evilginx2

@BlueRedTeam