#Red_Team

Weaponizing Carbon Lang for Red Team operation

https://github.com/ArchonLabs/Offensive-Carbon

@BlueRedTeam

#Blue_Team

​​Detectree

A data visualisation tool for blue teams. It provides a graphical representation of detection data, which allows an analyst generate almost instant opinions about the nature of the underlying activity and to understand complex relationships between the data points.

Ultimately, this can help reduce response time, reduce alert fatigue and facilitate communication between analysts within the teams.

https://github.com/countercept/detectree

@BlueRedTeam

#Red_Team

A methodology to formulate attack paths in a quiet manner using a back-to-basics approach. Originally presented at DEFCON/Red Team Village.

https://github.com/layer8secure/The-Storfield-Methodology

@BlueRedTeam

#Red_Team

In this repo you will find some projects related to Red Teaming

https://github.com/pathakabhi24/RedTeam-Projects

@BlueRedTeam

#Cobalt_Strike

Quick python utility I wrote to turn HTTP requests from burp suite into Cobalt Strike Malleable C2 profiles

https://github.com/CodeXTF2/Burp2Malleable

@BlueRedTeam

#CVE-2022

CVE-2022-24500 Windows SMB Unauthenticated Remote Code Execution Vulnerability

https://github.com/Daro1967/CVE-2022-24500-MASS-RCE

@BlueRedTeam

#Red_Team

Laboratorio de phishing, para curso Preparación de Campañas Red Team, de una Universidad de Santiago, agosto 2022.

https://github.com/Ppamo/usach_phishing_lab_202208

@BlueRedTeam

#Cobalt_Strike

An all-in-one Cobalt Strike BOF to patch, check and revert AMSI and ETW for x64 process.

https://github.com/ScriptIdiot/patchit

@BlueRedTeam

#CVE-2022

HTTP3-attacks (CVE-2022-30592)

https://github.com/efchatz/HTTP3-attacks

@BlueRedTeam

#Cobalt_Strike
Cobalt Strike UDRL for memory scanner evasion.

https://github.com/kyleavery/AceLdr

@BlueRedTeam

#CVE-2022
BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energy [CVE-2020-15802] [CVE-2022-20361]

https://github.com/francozappa/blur

@BlueRedTeam

#Cobalt_Strike

In-memory token vault BOF for Cobalt Strike

https://github.com/Henkru/cs-token-vault

@BlueRedTeam

#Cobalt_Strik

Awesome CobaltStrike

https://github.com/zer0yu/Awesome-CobaltStrike

@BlueRedTeam

#Red_Team
+ Steal private objects of other projects via project import
https://hackerone.com/reports/743953
+ HInvoke and avoiding PInvoke
https://dr4k0nia.github.io/dotnet/coding/2022/08/10/HInvoke-and-avoiding-PInvoke.html
+ Cobalt Strike UDRL for memory scanner evasion
https://github.com/kyleavery/AceLdr

@BlueRedTeam

#Red_Team

+ Windows attacks with Network Provider
https://www.scip.ch/en/?labs.20220217
+ Cleartext Shenanigans: Gifting User Passwords to Adversaries With NPPSPY
https://www.huntress.com/blog/cleartext-shenanigans-gifting-user-passwords-to-adversaries-with-nppspy

@BlueRedTeam

#Red_Team

+ Burp2Malleable - Python utility to turn HTTP requests from burp suite into Cobalt Strike Malleable C2 profiles
https://github.com/CodeXTF2/Burp2Malleable
+ A tool for extracting, modifying, and crafting ASDM binary packages (CVE-2022-20829)
https://github.com/jbaines-r7/theway

@BlueRedTeam

#Red_Team
+ Toolkit for abusing Kerberos PKU2U/NegoEx
https://github.com/morRubin/NegoExRelay
+ EDR bypass through Kernel callbacks removal
https://github.com/wavestone-cdt/EDRSandblast/tree/DefCon30Release

@BlueRedTeam

#Red_Team

Red Teamer

https://github.com/LIMI-JUICED/alx-higher_level_programming

@BlueRedTeam

#Red_Team

Automated Red Team Infrastructure deployement using Docker

https://github.com/khast3x/Redcloud

@BlueRedTeam

#Red_Team

Using the HIB segment to bypass KASLR on x86-based macOS

https://blog.ret2.io/2022/08/17/macos-dblmap-kernel-exploitation

@BlueRedTeam

#Blue_Team

+ Sauron - YARA based malware scanner with realtime filesystem monitoring
https://github.com/evilsocket/sauron

+ BARK Detections: These KQL queries are designed to find use of the abuses in the BloodHound BARK toolkit in Azure AD

https://github.com/reprise99/Sentinel-Queries/tree/main/Azure%20AD%20Abuse%20Detection

@BlueRedTeam