#Red_Team
+ scan4all - 15000+ PoCs; 20 kinds of application password crack; 7000+ Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW
https://github.com/hktalent/scan4all
+ A compact guide to network pivoting for penetration testings/CTF challenges
https://github.com/t3l3machus/pentest-pivoting
+ Authentication Bypass Techniques using SQLi, PHP, XPath, and LDAP injection
https://oxasploits.com/posts/authentication-bypass-techniques-sqli-php-xpath-ldap-tricks

@BlueRedTeam

#Blue_Team
+ dnsReaper - subdomain takeover tool
https://github.com/punk-security/dnsReaper
+ Check if a PAN firewall is using the default master key when globalprotect is enabled
https://gist.github.com/rqu1/6175cb2972291fc9ac96ef18f72b792c

#webshell

Best webshell backdoor

https://github.com/Naughty-SEC/Shell-backdoor

@BlueRedTeam

#Cobalt_Strike

Original Cobalt Strike

https://github.com/sabareeshkumaresan/Cobalt_Strike_4.5_Orginal

@BlueRedTeam

#webshell

Free webshell detection solution

https://github.com/movptr06/Webshell-defender

@BlueRedTeam

#Cobalt_Strike

Cobalt Strike BOF Files with Nim!

https://github.com/byt3bl33d3r/BOF-Nim

@BlueRedTeam

#webshell

enterprise webshell CLI to obfuscate attack patterns

https://github.com/0x3van/roflcopter

@BlueRedTeam

#Red_Team

! UNDER CONSTRUCTION ! This repository contains cutting-edge open-source security notes and tools that will help you during your Red Team assessments.

https://github.com/0xsyr0/Red-Team-Playbooks

@BlueRedTeam

#Red_Team

Cyber Security Red Team and Blue Team

https://github.com/Telmosantana/Plano-de-Estudo-Cyber-Security

@BlueRedTeam

#Red_Team
+ Creating Processes Using System Calls
https://www.coresecurity.com/core-labs/articles/creating-processes-using-system-calls
]-> PoC: https://github.com/helpsystems/CreateProcess

+ Standalone MITM attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
https://github.com/kgretzky/evilginx2

@BlueRedTeam

#Red_Team

Contains All tools i Use For Red Team OPs in Windows Environment. NOTE: I am not the Creator Of these tools. These are the tools i use.

https://github.com/G37SYS73M/win_tool_hub

@BlueRedTeam

#Cobalt_Strike

C2 Profiles for Cobalt Strike

https://github.com/OrneLibrary/Carcosa

@BlueRedTeam

#Red_Team

Red Team Blog

https://github.com/dmcxblue/dmcxblue.github.io

@BlueRedTeam

#redteam
RTFM: Red Team Field Manual v2 2022

📰 @Offensive01
📚 @Library_Sec

📚 T.me/Library_Sec

#Blue_Team
+ PICT - Post-Infection Collection Toolkit
https://github.com/thomasareed/pict
+ Powershell noscript to hunt persistences implanted in Windows machines
https://github.com/last-byte/PersistenceSniper

#Red_Team
Backdooring Office Structures
Part 1 - The Oldschool
https://mgeeky.tech/backdooring-office-structures-part-1-oldschool
Part 2 - Payload Crumbs In Custom Parts
https://mgeeky.tech/payload-crumbs-in-custom-parts

@BlueRedTeam

#Red_Team
1. Attacking and Remediating Excessive Network Share Permissions in Active Directory Environments
https://www.netspi.com/blog/technical/network-penetration-testing/network-share-permissions-powerhuntshares
2. HInvoke and avoiding PInvoke
https://dr4k0nia.github.io/dotnet/coding/2022/08/10/HInvoke-and-avoiding-PInvoke.html

@BlueRedTeam

#Blue_Team
+ How to Secure Deployments in Kubernetes
https://www.armosec.io/blog/secure-kubernetes-deployment
+ Kubernetes Security Best Practices: Definitive Guide
https://www.armosec.io/blog/kubernetes-security-best-practices

@BlueRedTeam

#Red_Team

Weaponizing Carbon Lang for Red Team operation

https://github.com/ArchonLabs/Offensive-Carbon

@BlueRedTeam