#Blue_Team
​​Iscariot Suite

The Iscariot Suite is a collection of tools to enhance and augment trusted open-source and commercial Blue Team/Sysadmin products, turning them into traitorware to achieve offensive security goals. The Iscariot Suite takes its name from the famous traitor Judas Iscariot, who - according to biblical tradition - betrayed Jesus.

https://gitlab.com/badsectorlabs/iscariot-suite

@BlueRedTeam

#Red_Team
+ Chopper payload smuggling
https://ired.dev/discussion/13/chopper-payload-smuggling
]-> https://github.com/0xsp-SRD/0xsp.com/tree/main/chopper

@BlueRedTeam

#Cobalt_Strike
Privat crypt Cobalt Strike and powershell

https://github.com/injectexpert/Crypt-Cobalt-Strike-Powershell

@BlueRedTeam

#Red_Team

Large Antenna Array Space Object Tracker - Red Team

https://github.com/wjiaaaaa/LAASOT

@BlueRedTeam

#CVE-2022

SpookySSL CVE-2022-3602 SSLv3 Scanner for Windows, Linux, macOS

https://github.com/alicangnll/SpookySSL-Scanner

@BlueRedTeam

#CVE-2022

A sample spring boot application demonstrating configuration that is vulnerable to CVE-2022-31692

https://github.com/SpindleSec/CVE-2022-31692

@BlueRedTeam

#Red_Team

A huge chunk of my personal notes since i started playing CTFs and working as a Red Teamer.

https://github.com/0xsyr0/Awesome-Cybersecurity-Handbooks

@BlueRedTeam

#CVE-2022

Operational information regarding CVE-2022-3602 and CVE-2022-3786, two vulnerabilities in OpenSSL 3

https://github.com/NCSC-NL/OpenSSL-2022

@BlueRedTeam

#webshell

a simple webshell build in PHP 7.4 for penetration testing and educational purposes only. ( it's not a other webshell's recode )

https://github.com/elliottophellia/ophellia

@BlueRedTeam

#Red_Team

Red Team vs Blue Team Simulation

https://github.com/eggietama/Assessment-Analysis-and-Hardening-of-a-Vulnerable-System

@BlueRedTeam

#Red_Team
+ CredUI - With Shellcode runner
https://ired.dev/discussion/comment/4/#Comment_4

+ XOR string encryption for NET based binaries
https://github.com/dr4k0nia/XorStringsNET

+ NoRunPI: Run Your Payload Without Running Your Payload
https://github.com/ORCx41/NoRunPI

+ Various Cobalt Strike BOFs
https://github.com/rvrsh3ll/BOF_Collection

@BlueRedTeam

CEH v12 - PDF Modules, LAB Modules, Videos

#CEH
@Library_Sec

Download in channel @Library_Sec

#CVE-2022
DrayTek unauthenticated remote code execution vulnerability (CVE-2022-32548) in /cgi-bin/wlogin.cgi via username field

https://github.com/HarleyDoo/CVE-2022-32548-RCE-POC

@BlueRedTeam

#webshell

A simple, yet sample, Rust webshell

https://github.com/zinzloun/Sirus

@BlueRedTeam

#Red_Team

A Azure Exploitation Toolkit for Red Team & Pentesters

https://github.com/SikretaLabs/BlueMap

@BlueRedTeam

#CVE-2022

The first poc video presenting the sql injection test from (  WordPress Core 5.8.2-'WP_Query'  / CVE-2022-21661)

https://github.com/APTIRAN/CVE-2022-21661

@BlueRedTeam

#getshell

Some payload for getshell in web.

https://github.com/DXHM/Usual_payload

@BlueRedTeam

#CVE-2022

A project demonstrating an app that is vulnerable to Spring Security authorization bypass CVE-2022-31692

https://github.com/SpindleSec/cve-2022-31692

@BlueRedTeam