1. Active Directory Penetration Testing Cheatsheet
Part 1: https://infosecwriteups.com/active-directory-penetration-testing-cheatsheet-5f45aa5b44ff
Part 2: https://infosecwriteups.com/active-directory-cheatsheet-part-2-b18e9aa2e73a

2. Bypass Server Upload Restrictions
https://infosecwriteups.com/bypass-server-upload-restrictions-69054c5e1be4

#RedTeam_Tactics
#RedTeam
@BlueRedTeam

Tool to help on web application firewall bypasses
https://github.com/RedSection/pFuzz

#RedTeam_Tactics
#RedTeam
@BlueRedTeam

Recon Guide for Pentesters and Bug Bounty Hunters

#RedTeam_Tactics
#RedTeam
@BlueRedTeam

1. NinjaC2 V2.1:
New webshell agent, more features and updated AV bypass
https://github.com/ahmedkhlief/Ninja
2. CVE-2021-33193:
Request splitting via HTTP/2 method injection and mod_proxy
https://github.com/CHYbeta/OddProxyDemo/tree/master/mod_proxy/demo1
3. Ultimate Phish Tool
https://github.com/gasayminajj/robophish

#RedTeam_Tactics
#RedTeam
@BlueRedTeam

Red Team Attack Lab for TTP testing & research
https://github.com/Marshall-Hallenbeck/red_team_attack_lab

#RedTeam_Tactics
#RedTeam
@BlueRedTeam

1. XSS payloads for bypassing WAF
https://github.com/Walidhossain010/WAF-bypass-xss-payloads
2. Resetting Expired Passwords Remotely
https://www.n00py.io/2021/09/resetting-expired-passwords-remotely

#RedTeam_Tactics
#RedTeam
@BlueRedTeam

1. Detecting and Hunting for the PetitPotam NTLM Relay Attack
https://research.nccgroup.com/2021/09/23/detecting-and-hunting-for-the-petitpotam-ntlm-relay-attack
2. Using CodeQL to detect client-side vulnerabilities in web applications
https://raz0r.name/articles/using-codeql-to-detect-client-side-vulnerabilities-in-web-applications


#BlueTeam_Techniques
#BlueTeam
@BlueRedTeam

A PoC tool utilizing open DNS resolvers to produce an amplification attack against web servers
https://github.com/Kleptocratic/DNS-Fender

#RedTeam_Tactics
#RedTeam
@BlueRedTeam

1. Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY \ SYSTEM
https://github.com/klezVirus/CandyPotato
2. Modular framework for discovering open directories, identifying unique content through signatures and organizing the data with optional output MISP modules
https://github.com/hpthreatresearch/subcrawl#requirements
#RedTeam_Tactics
#RedTeam
@BlueRedTeam

Windows Event Logging & Collection Guidance
https://github.com/JSCU-NL/logging-essentials

#BlueTeam_Technique
#BlueTeam
@BlueRedTeam

DongTai - interactive application security testing (IAST) product that supports the detection of OWASP WEB TOP-10 vulnerabilities, multi-request related vulnerabilities (including logic vulnerabilities, unauthorized access vulnerabilities, etc.), third-party component vulnerabilities
https://github.com/HXSecurity/DongTai

#BlueTeam_Techniques
#BlueTeam
@BlueRedTeam

Microsoft Automates Exchange Mitigations
https://techcommunity.microsoft.com/t5/exchange-team-blog/new-security-feature-in-september-2021-cumulative-update-for/ba-p/2783155

#BlueTeam_Techniques
#BlueTeam
@BlueRedTeam

A complete PoC exploit for CVE-2021-22005
in VMware vCenter
https://securityaffairs.co/wordpress/122686/hacking/cve-2021-22005-exploit-vmware-vcenter.html?utm_source=feedly&utm_medium=rss&utm_campaign=cve-2021-22005-exploit-vmware-vcenter

#exploit
@BlueRedTeam

1. XSS to RCE:
Covert Target Websites into Payload Landing Pages
https://whynotsecurity.com/blog/xss-to-rce
2. Redirecting (specific) TCP, UDP and ICMP traffic to another destination
https://github.com/jellever/StreamDivert

#RedTeam_Tactics
#RedTeam
@BlueRedTeam

Red Teaming and Social-Engineering related scripts, tools and CheatSheets
https://github.com/mgeeky/Penetration-Testing-Tools/tree/master/red-teaming


#RedTeam_Tactics
#RedTeam
#social_engineering
@BlueRedTeam

Collection of Event ID ressources useful for Digital Forensics and Incident Response
https://github.com/stuhli/awesome-event-ids

#BlueTeam_Techniques
#BlueTeam
@BlueRedTeam

1. Determine if the WebClient Service (WebDAV) is running on a remote system
https://github.com/xforcered/GetWebDAVStatus
2. Invoke-DLLClone - Koppeling x Metatwin x LazySign
https://redteamer.tips/appdata-is-a-mistake-introducing-invoke-dllclone
]-> https://github.com/jfmaes/Invoke-DLLClone

#RedTeam_Tactics
#RedTeam
@BlueRedTeam

1. Lightweight UNIX backdoor for ethical hacking
https://github.com/phath0m/JadedWraith
2. Patch for Waterfall to improve performance and fix memory issues
https://github.com/2lstudios-mc/FlameCord


#RedTeam_Tactics
#RedTeam
@BlueRedTeam

Into the art of Binary Exploitation 0x00002
(Sorcery of ROP)
https://7h3h4ckv157.medium.com/into-the-art-of-binary-exploitation-0x000002-sorcery-of-rop-b4658238ee62

#RedTeam_Tactics
#RedTeam
@BlueRedTeam

Tool to discover external/internal network attack surface
https://github.com/vmware-labs/attack-surface-framework

#BlueTeam_Techniques
#BlueTeam
@BlueRedTeam

PowerShell Red Team Enum.

Collection of PowerShell functions a Red Teamer may use to collect data from a machine or gain access to a target. I added ps1 files for the commands that are included in the RedTeamEnum module. This will allow you to easily find and use only one command if that is all you want. If you want the entire module perform the following actions after downloading the RedTeamEnum directory and contents to your device.

https://github.com/tobor88/PowerShell-Red-Team

#PowerShell #RedTeam
@BlueRedTeam