#Red_Team
+ Creating Processes Using System Calls
https://www.coresecurity.com/core-labs/articles/creating-processes-using-system-calls
]-> PoC: https://github.com/helpsystems/CreateProcess

+ Standalone MITM attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
https://github.com/kgretzky/evilginx2

@BlueRedTeam

#Red_Team

Contains All tools i Use For Red Team OPs in Windows Environment. NOTE: I am not the Creator Of these tools. These are the tools i use.

https://github.com/G37SYS73M/win_tool_hub

@BlueRedTeam

#Cobalt_Strike

C2 Profiles for Cobalt Strike

https://github.com/OrneLibrary/Carcosa

@BlueRedTeam

#Red_Team

Red Team Blog

https://github.com/dmcxblue/dmcxblue.github.io

@BlueRedTeam

#redteam
RTFM: Red Team Field Manual v2 2022

📰 @Offensive01
📚 @Library_Sec

📚 T.me/Library_Sec

#Blue_Team
+ PICT - Post-Infection Collection Toolkit
https://github.com/thomasareed/pict
+ Powershell noscript to hunt persistences implanted in Windows machines
https://github.com/last-byte/PersistenceSniper

#Red_Team
Backdooring Office Structures
Part 1 - The Oldschool
https://mgeeky.tech/backdooring-office-structures-part-1-oldschool
Part 2 - Payload Crumbs In Custom Parts
https://mgeeky.tech/payload-crumbs-in-custom-parts

@BlueRedTeam

#Red_Team
1. Attacking and Remediating Excessive Network Share Permissions in Active Directory Environments
https://www.netspi.com/blog/technical/network-penetration-testing/network-share-permissions-powerhuntshares
2. HInvoke and avoiding PInvoke
https://dr4k0nia.github.io/dotnet/coding/2022/08/10/HInvoke-and-avoiding-PInvoke.html

@BlueRedTeam

#Blue_Team
+ How to Secure Deployments in Kubernetes
https://www.armosec.io/blog/secure-kubernetes-deployment
+ Kubernetes Security Best Practices: Definitive Guide
https://www.armosec.io/blog/kubernetes-security-best-practices

@BlueRedTeam

#Red_Team

Weaponizing Carbon Lang for Red Team operation

https://github.com/ArchonLabs/Offensive-Carbon

@BlueRedTeam

#Blue_Team

​​Detectree

A data visualisation tool for blue teams. It provides a graphical representation of detection data, which allows an analyst generate almost instant opinions about the nature of the underlying activity and to understand complex relationships between the data points.

Ultimately, this can help reduce response time, reduce alert fatigue and facilitate communication between analysts within the teams.

https://github.com/countercept/detectree

@BlueRedTeam

#Red_Team

A methodology to formulate attack paths in a quiet manner using a back-to-basics approach. Originally presented at DEFCON/Red Team Village.

https://github.com/layer8secure/The-Storfield-Methodology

@BlueRedTeam

#Red_Team

In this repo you will find some projects related to Red Teaming

https://github.com/pathakabhi24/RedTeam-Projects

@BlueRedTeam

#Cobalt_Strike

Quick python utility I wrote to turn HTTP requests from burp suite into Cobalt Strike Malleable C2 profiles

https://github.com/CodeXTF2/Burp2Malleable

@BlueRedTeam

#CVE-2022

CVE-2022-24500 Windows SMB Unauthenticated Remote Code Execution Vulnerability

https://github.com/Daro1967/CVE-2022-24500-MASS-RCE

@BlueRedTeam

#Red_Team

Laboratorio de phishing, para curso Preparación de Campañas Red Team, de una Universidad de Santiago, agosto 2022.

https://github.com/Ppamo/usach_phishing_lab_202208

@BlueRedTeam

#Cobalt_Strike

An all-in-one Cobalt Strike BOF to patch, check and revert AMSI and ETW for x64 process.

https://github.com/ScriptIdiot/patchit

@BlueRedTeam

#CVE-2022

HTTP3-attacks (CVE-2022-30592)

https://github.com/efchatz/HTTP3-attacks

@BlueRedTeam

#Cobalt_Strike
Cobalt Strike UDRL for memory scanner evasion.

https://github.com/kyleavery/AceLdr

@BlueRedTeam