NEW BOT Телеграм, страница

Vajra is a UI based tool with multiple techniques for attacking/enumerating in target's Azure environment

https://github.com/TROUBLE-1/Vajra

#Azure
#Tools
@NetPentesters

GitHub

GitHub - TROUBLE-1/Vajra: Vajra is a UI-based tool with multiple techniques for attacking and enumerating in the target's Azure…

Vajra is a UI-based tool with multiple techniques for attacking and enumerating in the target's Azure and AWS environment. It features an intuitive web-based user interface built with the P...

415 views08:59

Network Penetration Testing

Intrusion statistics aligned to the MITRE ATT&CK framework

https://thedfirreport.com/2022/03/07/2021-year-in-review

@NetPentesters

The DFIR Report

2021 Year In Review

As we come to the end of the first quarter of 2022, we want to take some time to look back over our cases from 2021, in aggregate, and look at some of the top tactics, techniques and procedures (TT…

398 views07:46

Network Penetration Testing

AutoWarp: Critical Cross-Account Vulnerability in Microsoft Azure Automation Service

https://orca.security/resources/blog/autowarp-microsoft-azure-automation-service-vulnerability

#Azure
#Vulnerability
@NetPentesters

Orca Security

AutoWarp: Azure Automation Vulnerability | Orca Research Pod

AutoWarp is a critical vulnerability in Microsoft Azure Automation Service that allows unauthorized access to other customer accounts using the service.

478 views07:52

Network Penetration Testing

Azure Dominance Paths

https://cloudbrothers.info/en/azure-dominance-paths

#Cloud
#Azure
@NetPentesters

cloudbrothers.info

Azure Attack Paths

Creating and maintaining a secure environment is hard. And with every technology or product added to your environment it gets more complicated. Microsoft Azure as a cloud environment is no exception to this rule and with the many services and features that…

499 views08:57

Network Penetration Testing

PwnDefend Internal Network Attack Map Flow Chart.pdf

393.6 KB

Internal Network Attack Map Flow
#redteam #blueteam #pentest
@NetPentesters

1.98K views08:54

Network Penetration Testing

https://github.com/tihanyin/PSSW100AVB

#redteam
#AV
#bypass
@NetPentesters

GitHub

GitHub - tihanyin/PSSW100AVB: A list of useful Powershell noscripts with 100% AV bypass (At the time of publication).

A list of useful Powershell noscripts with 100% AV bypass (At the time of publication). - GitHub - tihanyin/PSSW100AVB: A list of useful Powershell noscripts with 100% AV bypass (At the time of public...

441 views12:22

Network Penetration Testing

Azure Dominance Paths

https://cloudbrothers.info/en/azure-dominance-paths/

#azure
#cloud
#AD
@NetPentesters

cloudbrothers.info

Azure Attack Paths

506 viewsedited 14:11

Network Penetration Testing

Network Penetration Testing pinned a file

14:13

Network Penetration Testing

All MITM attacks in one place :

https://github.com/frostbits-security/MITM-cheatsheet

#MITM
#Cheatsheet
@NetPentesters

GitHub

GitHub - frostbits-security/MITM-cheatsheet: All MITM attacks in one place.

All MITM attacks in one place. Contribute to frostbits-security/MITM-cheatsheet development by creating an account on GitHub.

490 views16:14

Network Penetration Testing

Resources for Kubernetes network policies

https://github.com/networkpolicy/community

#pollicies
@NetPentesters

GitHub

GitHub - networkpolicy/community: Resources for Kubernetes network policies

Resources for Kubernetes network policies. Contribute to networkpolicy/community development by creating an account on GitHub.

453 views10:49

Network Penetration Testing

LDAP relays for initial foothold in dire situations

https://offsec.almond.consulting/ldap-relays-for-initial-foothold-in-dire-situations.html

#LDAP
@NetPentesters

489 views10:53

Network Penetration Testing

Active Directory (Attack & Defense )

https://0xsp.com/offensive/active-directory-attack-defense

#AD
#Attack
#Defense
@NetPentesters

469 views00:40

Network Penetration Testing

MITRE ATT&CK TTP’s used by LAPSUS$

Two interesting techniques used by LAPSUS$ (Code Signing, Disable, and Modify Tools)

#MITRE
@NetPentesters

1.7K viewsedited 10:54

Network Penetration Testing

Vulnerable Active Directory
Create a vulnerable AD that will allow you to test most AD attacks in a local lab

Main characteristics:
- Random attacks
- Full coverage of the listed attacks
- it is necessary to run the noscript in DC with Active Directory installed
- Some attacks require a client workstation
Supported attacks:
- Abuse of ACLs/ACEs
- Kerberoasting
- AS-REP Roasting
- Abuse of DnsAdmins
- Password in object denoscription
- Custom objects with default password (Changeme123!)
- Password spraying
- DCSync
- Silver ticket
- Golden Ticket
- Pass-the-Hash
- Pass-the-Ticket
- SMB signing disabled

https://github.com/WazeHell/vulnerable-AD

#Ad
#Lab
@NetPentesters

GitHub

GitHub - safebuffer/vulnerable-AD: Create a vulnerable active directory that's allowing you to test most of the active directory…

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab - GitHub - safebuffer/vulnerable-AD: Create a vulnerable active directo...

801 views09:46

Network Penetration Testing

Azure Active Directory Exposes Internal Information

https://www.secureworks.com/research/azure-active-directory-exposes-internal-information

#Cloud
#Azure
#AD
@NetPentesters

Sophos

Azure Active Directory Exposes Internal Information - Threat Analysis

A threat actor can gather a significant amount of OSINT from an Azure AD tenant. Microsoft addressed all but two of the issues CTU researchers identified..

429 views08:33

Network Penetration Testing

Performing and Preventing Attacks on Azure Cloud Environments through Azure DevOps

https://labs.f-secure.com/blog/performing-and-preventing-attacks-on-azure-cloud-environments-through-azure-devops

#Cloud
#Azure
@NetPentesters