#Red_Team

AMSI Patch to Defeat Windows Defender
In this week's red team tip. I take a look at the new AMSI patch from TheD1rkMtr. I use the patch to slip Invoke-Mimikatz by Windows Defender. Take a look!Amsi Patch to Bypass Windows Defender

AMSI Patch
https://github.com/TheD1rkMtr/AMSI_patch

@BlueRedTeam

#webshell
I have webshell of my websites. But how to login to cpanel from webshell?

https://github.com/davidsantur/cpanel

@BlueRedTeam

#Cobalt_Strike
Cobalt Strike (CS) Beacon Object File (BOF) for kernel exploitation using AMD's Ryzen Master Driver (version 17).

https://github.com/tijme/amd-ryzen-master-driver-v17-exploit

@BlueRedTeam

#Red_Team

Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.

https://github.com/RhinoSecurityLabs/ccat

@BlueRedTeam

#Red_Team

Automate recon for red team assessments.

Thoth is a very modular tool that automates the execution of tools during a reconnaissance assessment. Using multithreading, several tools are executed simultaneously. The use of different modules can be adapted on the fly by using module names or risk level as a filter.

https://github.com/r1cksec/thoth

@BlueRedTeam

#Red_Team

Some HTB, THM , Red Team Training writeups

https://github.com/opabravo/security-writeups

@BlueRedTeam

#CVE-2023
A noscript to automate privilege escalation with CVE-2023-22809 vulnerability
https://github.com/n3m1dotsys/CVE-2023-22809-sudoedit-privesc


A noscript to automate privilege escalation with CVE-2023-22809 vulnerability

https://github.com/Live-Hack-CVE/CVE-2023-22884

POC and Scanner for CVE-2023-24055

https://github.com/Live-Hack-CVE/CVE-2023-21867


@BlueRedTeam

#webshell
Various webshells. We accept pull requests for additions to this collection.
https://github.com/BlackArch/webshells

@BlueRedTeam

#CVE-2023
POC and Scanner for CVE-2023-24055
https://github.com/deetl/CVE-2023-24055


CVE-2023-21839 exp

https://github.com/fakenews2025/CVE-2023-21839

CVE-2023-23132

https://github.com/l00neyhacker/CVE-2023-23132

@BlueRedTeam

#webshell
php webshell
https://github.com/upsi1on/Upsi1on-Shell

@BlueRedTeam

#Red_Team
Collection of OPSEC Tradecraft and TTPs for Red Team Operations

https://github.com/hack-with-ethics/dns-recon-dns-redTeaming

@BlueRedTeam

#webshell
Decode php webshells
https://github.com/x0-1337/webshells

@BlueRedTeam

#Cobalt_Strike
Toolset for research malware and Cobalt Strike beacons

https://github.com/RomanEmelyanov/CobaltStrikeForensic

@BlueRedTeam

#webshell
Decode php webshells

https://github.com/XZB-1248/Spark

@BlueRedTeam

#CVE-2023
This is a proof of concept for CVE-2023-24610

https://github.com/abbisQQ/CVE-2023-24610

CVE-2023-23924 PoC

https://github.com/motikan2010/CVE-2023-23924

CVE-2023-23924 PoC

https://github.com/Live-Hack-CVE/CVE-2023-20916

CVE-2023-23924 PoC

https://github.com/Live-Hack-CVE/CVE-2023-22664

@BlueRedTeam

#Red_Team

This is a template to show how the Red Team will structure files

https://github.com/stevenshow/File-Structure

@BlueRedTeam

#Red_Team
This is a template to show how the Red Team will structure files

https://github.com/halbeeb/Cloud-Warehouse-AWS-Redshift

@BlueRedTeam

This channel is only about Red Team.

Follow the contents of Blue Team from this @BlueTeamKit channel.

#CVE-2023

CVE-2023-23924 PoC
https://github.com/Live-Hack-CVE/CVE-2023-20916

CVE-2023-23924 PoC
https://github.com/Live-Hack-CVE/CVE-2023-22664


Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit
https://github.com/hacksysteam/CVE-2023-21608

@BlueRedTeam