#Red_Team
+ Steal private objects of other projects via project import
https://hackerone.com/reports/743953
+ HInvoke and avoiding PInvoke
https://dr4k0nia.github.io/dotnet/coding/2022/08/10/HInvoke-and-avoiding-PInvoke.html
+ Cobalt Strike UDRL for memory scanner evasion
https://github.com/kyleavery/AceLdr

@BlueRedTeam

#Red_Team

+ Windows attacks with Network Provider
https://www.scip.ch/en/?labs.20220217
+ Cleartext Shenanigans: Gifting User Passwords to Adversaries With NPPSPY
https://www.huntress.com/blog/cleartext-shenanigans-gifting-user-passwords-to-adversaries-with-nppspy

@BlueRedTeam

#Red_Team

+ Burp2Malleable - Python utility to turn HTTP requests from burp suite into Cobalt Strike Malleable C2 profiles
https://github.com/CodeXTF2/Burp2Malleable
+ A tool for extracting, modifying, and crafting ASDM binary packages (CVE-2022-20829)
https://github.com/jbaines-r7/theway

@BlueRedTeam

#Red_Team
+ Toolkit for abusing Kerberos PKU2U/NegoEx
https://github.com/morRubin/NegoExRelay
+ EDR bypass through Kernel callbacks removal
https://github.com/wavestone-cdt/EDRSandblast/tree/DefCon30Release

@BlueRedTeam

#Red_Team

Red Teamer

https://github.com/LIMI-JUICED/alx-higher_level_programming

@BlueRedTeam

#Red_Team

Automated Red Team Infrastructure deployement using Docker

https://github.com/khast3x/Redcloud

@BlueRedTeam

#Red_Team

Using the HIB segment to bypass KASLR on x86-based macOS

https://blog.ret2.io/2022/08/17/macos-dblmap-kernel-exploitation

@BlueRedTeam

#Blue_Team

+ Sauron - YARA based malware scanner with realtime filesystem monitoring
https://github.com/evilsocket/sauron

+ BARK Detections: These KQL queries are designed to find use of the abuses in the BloodHound BARK toolkit in Azure AD

https://github.com/reprise99/Sentinel-Queries/tree/main/Azure%20AD%20Abuse%20Detection

@BlueRedTeam

#Red_Team

Ways to Dump LSASS
https://crypt0ace.github.io/posts/Dumping-Lsass

@BlueRedTeam

#Blue_Team
+ Like cURL, but for gRPC: Command-line tool for interacting with gRPC servers
https://github.com/fullstorydev/grpcurl
+ Open Anti-Rootkit
https://github.com/BlackINT3/OpenArk

@BlueRedTeam

#Blue_Team
+ How to Detect OAuth Access Token Theft in Azure
https://www.inversecos.com/2022/08/how-to-detect-oauth-access-token-theft.html
+ Rapidly Search and Hunt through Windows Event Logs
https://github.com/WithSecureLabs/chainsaw
+ Design an identity security strategy
https://www.cloudpartner.fi/?p=8328

@BlueRedTeam

#Red_Team
Windows Privilege Escalation
Part 1 - Unquoted service paths
https://medium.com/@tinopreter/windows-privilege-escalation-1-unquoted-service-paths-975e3ea6f1e9
Part 2 - Hijacking DLLs
https://medium.com/@tinopreter/windows-privilege-escalation-2-hijacking-dlls-28505b68a978

@BlueRedTeam

#Red_Team

+ EtwSessionHijacking - Poc on blocking Procmon from monitoring network events
https://github.com/ORCx41/EtwSessionHijacking
+ Investigating .NET CLR Usage Log Tampering Techniques For EDR Evasion
https://bohops.com/2022/08/22/investigating-net-clr-usage-log-tampering-techniques-for-edr-evasion-part-2

@BlueRedTeam

🏃‍♂️ آموزش های رایگان امنیت شبکه و تست نفوذ
✅ مقالات حوزه امنیت شبکه و تست نفوذ
🔴 پکیج های آموزشی
🔰 به همراه فیلم های آموزشی رایگان

https://news.1rj.ru/str/irsecurityworld

#Red_Team #Blue_Team
MITRE ATT&CK Matrix for Kubernetes: Tactics & Techniques 

Part 1
Part 2
Part 3

@BlueRedTeam

#Red_Team
Spoofing Call Stacks To Confuse EDRs

https://labs.withsecure.com/blog/spoofing-call-stacks-to-confuse-edrs/

@BlueRedTeam

#Red_Team

Bypassing AppLocker by abusing HashInfo
https://shells.systems/post-bypassing-applocker-by-abusing-hashinfo

@BlueRedTeam

#Red_Team

+ RCE on Spip and Root-Me
https://thinkloveshare.com/hacking/rce_on_spip_and_root_me
]-> v2: https://thinkloveshare.com/hacking/rce_on_spip_and_root_me_v2
+ Guide to DLL Sideloading
https://crypt0ace.github.io/posts/DLL-Sideloading

@BlueRedTeam

#Blue_Team

Process Behaviour Anomaly Detection Using EBPF and Unsupervised-Learning Autoencoders
https://www.evilsocket.net/2022/08/15/Process-behaviour-anomaly-detection-using-eBPF-and-unsupervised-learning-Autoencoders

@BlueRedTeam

#Blue_Team

PersistenceSniper
Powershell noscript that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines

https://github.com/last-byte/PersistenceSniper/

@BlueRedTeam

Network Penetration Testing:
The people who work in this branch have a good knowledge of infrastructure and network services and the skills and tools of penetration testing, or rather, the skills and tools of hacking to find the weaknesses and vulnerabilities of different equipment and systems. and different network services use, these people must use the latest tools and methods to be able to pass through network security mechanisms to find various network weaknesses.


You can learn these contents in our channel and have access to various resources.


@NetPentesters

Persian Channel : @NetPentester