NEW BOT Телеграм, страница

HazProne - Cloud Pentesting Framework

https://github.com/stafordtituss/HazProne

#cloud
@NetPentesters

GitHub - stafordtituss/HazProne: HazProne is a Cloud Pentesting Framework that emulates close to Real-World Scenarios by deploying…

HazProne is a Cloud Pentesting Framework that emulates close to Real-World Scenarios by deploying Vulnerable-By-Demand AWS resources enabling you to pentest Vulnerabilities within, and hence, gain ...

286 views08:34

Network Penetration Testing

Vulnerable AWS Lambda function - Initial access in cloud attacks

https://sysdig.com/blog/exploit-mitigate-aws-lambdas-mitre

#Cloud
#Vulnerability
#AWS

@NetPentesters

Sysdig

Lambda Threat – Best Practices for Lambda Security | Sysdig

The security research team explains the attack scenario with a vulnerable AWS Lambda function could be a threat used by attackers.

222 views07:09

Network Penetration Testing

Exploiting Common Misconfigurations in Cisco Phone Systems

https://www.trustedsec.com/blog/seeyoucm-thief-exploiting-common-misconfigurations-in-cisco-phone-systems

]-> Tool to automatically download/parse configuration files from Cisco phone systems searching for SSH credentials:

https://github.com/trustedsec/SeeYouCM-Thief

#Cisco
#tools
@NetPentesters

TrustedSec

SeeYouCM-Thief: Exploiting Common Misconfigurations in Cisco Phone…

1.1 Intro I spent my early IT career working for a Cisco partner that specialized in Cisco phone systems. I did, however, get to see my share of networks…

232 views07:18

Network Penetration Testing

Attack and defend active directory using modern
post exploitation adversary tradecraft activity

https://github.com/infosecn1nja/AD-Attack-Defense

#AD
#RedTeam
#Attack

@NetPentesters

GitHub

GitHub - infosecn1nja/AD-Attack-Defense: Attack and defend active directory using modern post exploitation adversary tradecraft…

Attack and defend active directory using modern post exploitation adversary tradecraft activity - infosecn1nja/AD-Attack-Defense

296 views07:36

Network Penetration Testing

Mandiant Azure AD Investigator:
PowerShell module for detecting artifacts that may be indicators of UNC2452 and other threat actor activity

https://github.com/mandiant/Mandiant-Azure-AD-Investigator

#Cloud
#AD
#Azure
#PowerShell

@NetPentesters

GitHub

GitHub - mandiant/Mandiant-Azure-AD-Investigator

Contribute to mandiant/Mandiant-Azure-AD-Investigator development by creating an account on GitHub.

251 views06:37

Network Penetration Testing

Azure Security Resources and Notes

https://github.com/rootsecdev/Azure-Red-Team

#Cloud
#Azure
#RedTeam

@NetPentesters

GitHub

GitHub - rootsecdev/Azure-Red-Team: Azure Security Resources and Notes

Azure Security Resources and Notes. Contribute to rootsecdev/Azure-Red-Team development by creating an account on GitHub.

261 views09:20

Network Penetration Testing

Active Directory security check in seconds The PingCastle tool allows you to perform more than 100K AD security checks, without installation, administration or sending data "to the cloud", while generating a convenient report. Some of the checks include potential risks, so there may be occasional false positives.

https://github.com/vletoux/pingcastle

#redteam
#ad
@NetPentesters

GitHub

GitHub - netwrix/pingcastle: PingCastle - Get Active Directory Security at 80% in 20% of the time

PingCastle - Get Active Directory Security at 80% in 20% of the time - netwrix/pingcastle

696 views21:16

Network Penetration Testing

Checking out Azure AD cross tenant access policies
https://goodworkaround.com/2022/01/12/checking-out-azure-ad-cross-tenant-access-policies
]-> Terraform Azure IP Ranges module:
https://github.com/goodworkaround/tfazureipranges

#Cloud
#Azure
#AD

@NetPentesters

Good Workaround!

Checking out Azure AD cross tenant access policies

So, as one does, I was checking out the different Microsoft Graph AppRoles, which are the application scopes available. And then I found this: Now, I now cross tenant access is something Microsoft …

302 views08:34

Network Penetration Testing

Identify privilege escalation paths within and across different clouds/SaaS

https://github.com/carlospolop/PurplePanda

#tools
#Cloud
#Privilege
@NetPentesters

GitHub

GitHub - carlospolop/PurplePanda: Identify privilege escalation paths within and across different clouds

Identify privilege escalation paths within and across different clouds - carlospolop/PurplePanda

907 views03:23

Network Penetration Testing

Persistence with Azure Policy Guest Configuration

https://cloudbrothers.info/en/azure-persistence-azure-policy-guest-configuration

#Cloud
#Azure
@NetPentesters

cloudbrothers.info

Persistence with Azure Policy Guest Configuration

Azure Policy enables administrators to define, enforce and remediate configuration standards on Azure resources and even on non Azure assets using Azure Arc. One key feature, that was released in 2021, is the guest configuration feature of Azure Policy.
Basically…

292 views09:29

Network Penetration Testing

RDWArecon A python noscript to extract information from a Microsoft Remote Desktop Web Access (RDWA) application

https://github.com/p0dalirius/RDWArecon

#Microsoft
#python
@NetPentesters

GitHub

GitHub - p0dalirius/RDWAtool: A python noscript to extract information from a Microsoft Remote Desktop Web Access (RDWA) application

A python noscript to extract information from a Microsoft Remote Desktop Web Access (RDWA) application - GitHub - p0dalirius/RDWAtool: A python noscript to extract information from a Microsoft Remote ...

336 views09:39

Network Penetration Testing

Software Defined Radio:
Building a Cellphone IMSI Catcher (Stingray)

https://www-hackers--arise-com.cdn.ampproject.org/c/s/www.hackers-arise.com/amp/software-defined-radio-part-6-building-a-imsi-catcher-stingray

@NetPentesters

366 views08:14

Network Penetration Testing

MITRE Cyber Analytics Repository (CAR)

https://car.mitre.org
]-> https://github.com/mitre-attack/car
#Mitre
@NetPentesters

MITRE Cyber Analytics Repository

Welcome to the Cyber Analytics Repository

273 views07:37