1. JDBC Connection URL Attack
https://su18.org/post/jdbc-connection-url-attack
2. IP-Board Stored XSS to RCE Chain
https://ssd-disclosure.com/ssd-advisory-ip-board-stored-xss-to-rce-chain
3. Attacking Google Chrome's Strict Site Isolation via Speculative Execution and Type Confusion
https://www.spookjs.com

#RedTeam_Tactics
#RedTeam
@BlueRedTeam

macOS XPC Exploitation - Sandbox Share case study
https://www.synacktiv.com/en/publications/macos-xpc-exploitation-sandbox-share-case-study.html
]-> Exploit code:
https://github.com/synacktiv/CTF-Write-ups/blob/main/Alles-CTF-2021/pwn/sandbox_share.md

#RedTeam_Tactics
#RedTeam
@BlueRedTeam

Play the music and bypass TCC aka CVE-2020-29621 (PoC)
https://wojciechregula.blog/post/play-the-music-and-bypass-tcc-aka-cve-2020-29621

#RedTeam_Tactics
#RedTeam
@BlueRedTeam

1. Bypassing GCP Org Policy with Custom Metadata
https://kattraxler.github.io/gcp/hacking/2021/09/10/gcp-org-policy-bypass-ai-notebooks.html
2. Deanonymizing LinkedIn Users
https://blog.h3xstream.com/2021/04/deanonymizing-linkedin-users.html
// Privacy issues with some of LinkedIn’s external APIs

#RedTeam_Tactics
#RedTeam
@BlueRedTeam

Fast Identification of Vulnerable Web Technologies
https://github.com/RossGeerlings/webstor#supported-platforms
#Blue_Team_Techniques
#BlueTeam
@BlueRedTeam

Join :

@iotpenetrationtesting

@unique_exploit

@library_Sec

@Gray1986

Mapping and Pivoting from Cobalt Strike C2 Infrastructure Attributed to CVE-2021-40444
https://michaelkoczwara.medium.com/mapping-and-pivoting-cobalt-strike-c2-infrastructure-attributed-to-cve-2021-40444-438786fcd68a

#Blue_Team_Techniques
#Blue_Team
@BlueRedTeam

1. Kerberoast with ACL abuse capabilities
https://github.com/ShutdownRepo/targetedKerberoast
2. A collection of Windows print spooler exploits containerized with other utilities for practical exploitation
https://github.com/BeetleChunks/SpoolSploit#create-and-access-the-spoolsploit-docker-container


#Red_Team
@BlueRedTeam

https://sechub.medium.com/blue-team-system-live-analysis-part-3-windows-technical-checklist-1ef79284cbdc

#Blue_Team
@BlueRedTeam

Exploit Development:
Leveraging Page Table Entries for Windows Kernel Exploitation
https://connormcgarr.github.io/pte-overwrites

#RedTeam_Tactics
#RedTeam
@BlueRedTeam

CVE-2021-40539:
Zoho ManageEngine ADSelfService Plus <=6113 is vulnerable to REST API authentication bypass with resultant RCE (Patch + PoC)
https://attackerkb.com/topics/DMSNq5zgcW/cve-2021-40539/rapid7-analysis

#exploit
@BlueRedTeam

1. Active Directory Penetration Testing Cheatsheet
Part 1: https://infosecwriteups.com/active-directory-penetration-testing-cheatsheet-5f45aa5b44ff
Part 2: https://infosecwriteups.com/active-directory-cheatsheet-part-2-b18e9aa2e73a

2. Bypass Server Upload Restrictions
https://infosecwriteups.com/bypass-server-upload-restrictions-69054c5e1be4

#RedTeam_Tactics
#RedTeam
@BlueRedTeam

Tool to help on web application firewall bypasses
https://github.com/RedSection/pFuzz

#RedTeam_Tactics
#RedTeam
@BlueRedTeam

Recon Guide for Pentesters and Bug Bounty Hunters

#RedTeam_Tactics
#RedTeam
@BlueRedTeam

1. NinjaC2 V2.1:
New webshell agent, more features and updated AV bypass
https://github.com/ahmedkhlief/Ninja
2. CVE-2021-33193:
Request splitting via HTTP/2 method injection and mod_proxy
https://github.com/CHYbeta/OddProxyDemo/tree/master/mod_proxy/demo1
3. Ultimate Phish Tool
https://github.com/gasayminajj/robophish

#RedTeam_Tactics
#RedTeam
@BlueRedTeam

Red Team Attack Lab for TTP testing & research
https://github.com/Marshall-Hallenbeck/red_team_attack_lab

#RedTeam_Tactics
#RedTeam
@BlueRedTeam

1. XSS payloads for bypassing WAF
https://github.com/Walidhossain010/WAF-bypass-xss-payloads
2. Resetting Expired Passwords Remotely
https://www.n00py.io/2021/09/resetting-expired-passwords-remotely

#RedTeam_Tactics
#RedTeam
@BlueRedTeam

1. Detecting and Hunting for the PetitPotam NTLM Relay Attack
https://research.nccgroup.com/2021/09/23/detecting-and-hunting-for-the-petitpotam-ntlm-relay-attack
2. Using CodeQL to detect client-side vulnerabilities in web applications
https://raz0r.name/articles/using-codeql-to-detect-client-side-vulnerabilities-in-web-applications


#BlueTeam_Techniques
#BlueTeam
@BlueRedTeam

A PoC tool utilizing open DNS resolvers to produce an amplification attack against web servers
https://github.com/Kleptocratic/DNS-Fender

#RedTeam_Tactics
#RedTeam
@BlueRedTeam

1. Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY \ SYSTEM
https://github.com/klezVirus/CandyPotato
2. Modular framework for discovering open directories, identifying unique content through signatures and organizing the data with optional output MISP modules
https://github.com/hpthreatresearch/subcrawl#requirements
#RedTeam_Tactics
#RedTeam
@BlueRedTeam

Windows Event Logging & Collection Guidance
https://github.com/JSCU-NL/logging-essentials

#BlueTeam_Technique
#BlueTeam
@BlueRedTeam