"Who Owns Your Hybrid Active Directory? Hunting for Adversary Techniques", 2021.

#cloud
#ad
@NetPentesters

Active Directory Lateral Movement

https://research.splunk.com/stories/active_directory_lateral_movement


#Blue_Team
#AD
@NetPentesters

Intruding 5G core networks from outside and inside


https://penthertz.com/blog/Intruding-5G-core-networks-from-outside-and_inside.html

#5G
#Network

@NetPentesters

Powershell tool to automate Active Directory enumeration

https://github.com/61106960/adPEAS#simple-usage-with-generic-program-parameters

#PowerShell
#Redteam
#Ad

@NetPentesters

Cloud Security Breaches and Vulnerabilities:
2021 in Review

https://blog.christophetd.fr/cloud-security-breaches-and-vulnerabilities-2021-in-review

#breaches
#cloud
#Vulnerability

@NetPentesters

Internal network honeypot for detecting if an attacker/insider threat scans your network for log4j CVE-2021-44228
https://github.com/BinaryDefense/log4j-honeypot-flask


#honeypot
#Log4j
@NetPentesters

Active Directory Red Team Tools

https://github.com/nobelh/ActiveDirectory

#AD
#RedTeam
#Tools
@NetPentesters

The mindmaps for AWS services
to get AWS Certificates easier

https://github.com/notcuder/aws-mindmap

#Mindmap
#Aws

@NetPentesters

CrackMapExec (CME) is a post-exploitation tool that helps automate assessing the security of large Active Directory networks

https://github.com/byt3bl33d3r/CrackMapExec

#AD

@NetPentesters

CVE-2021-45608 - NetUSB RCE Flaw in Millions of End User Routers

https://www.sentinelone.com/labs/cve-2021-45608-netusb-rce-flaw-in-millions-of-end-user-routers

#router
#cve

@NetPentesters

icmpdoor - ICMP reverse shell in Python 3

https://cryptsus.com/blog/icmp-reverse-shell.html
]-> https://github.com/krabelize/icmpdoor

#python

@NetPentesters

Searching for Deserialization Protection Bypasses
in Microsoft Exchange (CVE-2022-21969)

https://medium.com/@frycos/searching-for-deserialization-protection-bypasses-in-microsoft-exchange-cve-2022-21969-bfa38f63a62d

#Microsoft
#exchange

@NetPentesters

SMBploit - offensive tool to scan/exploit vulnerabilities in Microsoft Windows over the Samba protocol (SMB) using the Metasploit Framework

https://github.com/d4t4s3c/SMBploit

@NetPentesters

HazProne - Cloud Pentesting Framework

https://github.com/stafordtituss/HazProne

#cloud
@NetPentesters

Vulnerable AWS Lambda function - Initial access in cloud attacks

https://sysdig.com/blog/exploit-mitigate-aws-lambdas-mitre

#Cloud
#Vulnerability
#AWS

@NetPentesters

Exploiting Common Misconfigurations in Cisco Phone Systems

https://www.trustedsec.com/blog/seeyoucm-thief-exploiting-common-misconfigurations-in-cisco-phone-systems

]-> Tool to automatically download/parse configuration files from Cisco phone systems searching for SSH credentials:

https://github.com/trustedsec/SeeYouCM-Thief

#Cisco
#tools
@NetPentesters

Attack and defend active directory using modern
post exploitation adversary tradecraft activity

https://github.com/infosecn1nja/AD-Attack-Defense

#AD
#RedTeam
#Attack

@NetPentesters

Mandiant Azure AD Investigator:
PowerShell module for detecting artifacts that may be indicators of UNC2452 and other threat actor activity

https://github.com/mandiant/Mandiant-Azure-AD-Investigator

#Cloud
#AD
#Azure
#PowerShell

@NetPentesters

Azure Security Resources and Notes

https://github.com/rootsecdev/Azure-Red-Team

#Cloud
#Azure
#RedTeam

@NetPentesters

Active Directory security check in seconds The PingCastle tool allows you to perform more than 100K AD security checks, without installation, administration or sending data "to the cloud", while generating a convenient report. Some of the checks include potential risks, so there may be occasional false positives.

https://github.com/vletoux/pingcastle

#redteam
#ad
@NetPentesters

Checking out Azure AD cross tenant access policies
https://goodworkaround.com/2022/01/12/checking-out-azure-ad-cross-tenant-access-policies
]-> Terraform Azure IP Ranges module:
https://github.com/goodworkaround/tfazureipranges

#Cloud
#Azure
#AD

@NetPentesters