#webshell

Best webshell backdoor

https://github.com/Naughty-SEC/Shell-backdoor

@BlueRedTeam

#Cobalt_Strike

Original Cobalt Strike

https://github.com/sabareeshkumaresan/Cobalt_Strike_4.5_Orginal

@BlueRedTeam

#webshell

Free webshell detection solution

https://github.com/movptr06/Webshell-defender

@BlueRedTeam

#Cobalt_Strike

Cobalt Strike BOF Files with Nim!

https://github.com/byt3bl33d3r/BOF-Nim

@BlueRedTeam

#webshell

enterprise webshell CLI to obfuscate attack patterns

https://github.com/0x3van/roflcopter

@BlueRedTeam

#Red_Team

! UNDER CONSTRUCTION ! This repository contains cutting-edge open-source security notes and tools that will help you during your Red Team assessments.

https://github.com/0xsyr0/Red-Team-Playbooks

@BlueRedTeam

#Red_Team

Cyber Security Red Team and Blue Team

https://github.com/Telmosantana/Plano-de-Estudo-Cyber-Security

@BlueRedTeam

#Red_Team
+ Creating Processes Using System Calls
https://www.coresecurity.com/core-labs/articles/creating-processes-using-system-calls
]-> PoC: https://github.com/helpsystems/CreateProcess

+ Standalone MITM attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
https://github.com/kgretzky/evilginx2

@BlueRedTeam

#Red_Team

Contains All tools i Use For Red Team OPs in Windows Environment. NOTE: I am not the Creator Of these tools. These are the tools i use.

https://github.com/G37SYS73M/win_tool_hub

@BlueRedTeam

#Cobalt_Strike

C2 Profiles for Cobalt Strike

https://github.com/OrneLibrary/Carcosa

@BlueRedTeam

#Red_Team

Red Team Blog

https://github.com/dmcxblue/dmcxblue.github.io

@BlueRedTeam

#redteam
RTFM: Red Team Field Manual v2 2022

📰 @Offensive01
📚 @Library_Sec

📚 T.me/Library_Sec

#Blue_Team
+ PICT - Post-Infection Collection Toolkit
https://github.com/thomasareed/pict
+ Powershell noscript to hunt persistences implanted in Windows machines
https://github.com/last-byte/PersistenceSniper

#Red_Team
Backdooring Office Structures
Part 1 - The Oldschool
https://mgeeky.tech/backdooring-office-structures-part-1-oldschool
Part 2 - Payload Crumbs In Custom Parts
https://mgeeky.tech/payload-crumbs-in-custom-parts

@BlueRedTeam

#Red_Team
1. Attacking and Remediating Excessive Network Share Permissions in Active Directory Environments
https://www.netspi.com/blog/technical/network-penetration-testing/network-share-permissions-powerhuntshares
2. HInvoke and avoiding PInvoke
https://dr4k0nia.github.io/dotnet/coding/2022/08/10/HInvoke-and-avoiding-PInvoke.html

@BlueRedTeam

#Blue_Team
+ How to Secure Deployments in Kubernetes
https://www.armosec.io/blog/secure-kubernetes-deployment
+ Kubernetes Security Best Practices: Definitive Guide
https://www.armosec.io/blog/kubernetes-security-best-practices

@BlueRedTeam

#Red_Team

Weaponizing Carbon Lang for Red Team operation

https://github.com/ArchonLabs/Offensive-Carbon

@BlueRedTeam

#Blue_Team

​​Detectree

A data visualisation tool for blue teams. It provides a graphical representation of detection data, which allows an analyst generate almost instant opinions about the nature of the underlying activity and to understand complex relationships between the data points.

Ultimately, this can help reduce response time, reduce alert fatigue and facilitate communication between analysts within the teams.

https://github.com/countercept/detectree

@BlueRedTeam

#Red_Team

A methodology to formulate attack paths in a quiet manner using a back-to-basics approach. Originally presented at DEFCON/Red Team Village.

https://github.com/layer8secure/The-Storfield-Methodology

@BlueRedTeam