PowerShell Red Team Enum.

Collection of PowerShell functions a Red Teamer may use to collect data from a machine or gain access to a target. I added ps1 files for the commands that are included in the RedTeamEnum module. This will allow you to easily find and use only one command if that is all you want. If you want the entire module perform the following actions after downloading the RedTeamEnum directory and contents to your device.

https://github.com/tobor88/PowerShell-Red-Team

#PowerShell #RedTeam
@BlueRedTeam

Incident Response collection and processing scripts
with automated reporting scripts
https://github.com/FSecureLABS/LinuxCatScale

#BlueTeam_Techniques
#BlueTeam
@BlueRedTeam

1. CVE-2021-34486:
Windows 20H2 x64 Etw LPE
https://github.com/KaLendsi/CVE-2021-34486

2. CVE-2021-26085 / CVE-2021-26086:
Atlassian Confluence Server 7.5.1 Pre-Authorization Arbitrary File Read vulnerability / Atlassian Jira Server/DataCenter 8.4.0 - Arbitrary File read
https://github.com/ColdFusionX/CVE-2021-26085
https://github.com/ColdFusionX/CVE-2021-26086
#exploit
@BlueRedTeam

1. Sysmon For Linux
https://github.com/Sysinternals/SysmonForLinux
]-> Automating the deployment of Sysmon for Linux/Azure Sentinel in a lab environment
https://techcommunity.microsoft.com/t5/azure-sentinel/automating-the-deployment-of-sysmon-for-linux-and-azure-sentinel/ba-p/2847054

#BlueTeam_Techniques
#BlueTeam
@BlueRedTeam

1. Compromising vCenter via SAML Certificates
https://www.horizon3.ai/compromising-vcenter-via-saml-certificates
]-> PoC: https://github.com/horizon3ai/vcenter_saml_login
2. Youtube as covert-channel -
C2 by uploading videos to Youtube
https://github.com/ricardojoserf/covert-tube

#RedTeam_Tactics
#RedTeam
@BlueRedTeam

#WLAN_Security
Bluetooth WarDriving with the nRF52
https://machinehum.medium.com/bluetooth-wardriving-with-the-nrf52-c6beaf7bc5e2
]-> Repo:
https://github.com/Machine-Hum/nRF52_War_Driving

@BlueRedTeam

1. Open-source toolkit for large-scale network analysis
https://github.com/networkit/networkit
2. A Linux Auditd rule set mapped to MITRE's Attack Framework
https://github.com/bfuzzy/auditd-attack


#BlueTeam_Techniques
#BlueTeam
@BlueTeam

LDAP Monitor:
Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration
https://github.com/p0dalirius/LDAPmonitor

#BlueTeam_Techniques
#BlueTeam
@BlueRedTeam

A new lateral movement technique using DCOM and HTA
https://codewhitesec.blogspot.com/2018/07/lethalhta.html
2. Elevation of privileges via Resource Based Constrained Delegation 
https://pentestlab.blog/2021/10/18/resource-based-constrained-delegation

#RedTeam_Tactics
#RedTeam
@BlueRedTeam

Web-based tool for the automation of infosec watching
and vulnerability management with a web interface
https://github.com/Guezone/SECMON

#BlueTeam_Techniques
#BlueTeam
@BlueRedTeam

1. Weaponizing a NFC reader for basic timing attacks
https://ceres-c.it/2021/10/24/weaponizing-NFC-reader
2. Advanced request smuggling
https://portswigger.net/web-security/request-smuggling/advanced

#RedTeam_Tactics
#RedTeam
@blueredteam

#RedTeam_Tactics
#RedTeam
Get shells with JET, the Jolokia Exploitation Toolkit
https://thinkloveshare.com/hacking/shells_with_jolokia_exploitation_toolkit
]-> jolokia-exploitation-toolkit:
https://github.com/laluka/jolokia-exploitation-toolkit

#Blue_Team_Techniques
#BlueTeam
1. MalAPI: maps Windows APIs to common techniques used by malware
https://malapi.io
2. How the SolarWinds Hack (almost) went Undetected
https://www.netresec.com/?page=Blog&month=2021-10&post=How-the-SolarWinds-Hack-almost-went-Undetected

@BlueRedTeam

Red Team Toolkit

https://github.com/signorrayan/RedTeam_toolkit

#Redteam
@blueredteam

#RedTeam_Tactics
#Redteam
1. Chrome Exploitation:
An old but good case-study
https://blog.haboob.sa/blog/chrome-exploitation-an-old-but-good-case-study
2. DCOM abuse and lateral movement with Cobalt Strike
https://www.pentestpartners.com/security-blog/dcom-abuse-and-lateral-movement-with-cobalt-strike

@BlueRedTeam

#BlueTeam_Techniques
#BlueTeam
A methodology for mapping MITRE ATT&CK
techniques to vulnerability records to describe
the impact of a vulnerability
https://github.com/center-for-threat-informed-defense/attack_to_cve

@BlueRedTeam

#RedTeam_Tactics
#RedTeam
1. Auth Bypass in Google Assistant
https://feed.bugs.xdavidhu.me/bugs/0011
2. A Primer for Testing the Security of GraphQL APIs
https://blog.forcesunseen.com/a-primer-for-testing-the-security-of-graphql-apis

@BlueRedTeam