Cobalt Strike BOF Files with Nim!

https://github.com/byt3bl33d3r/BOF-Nim

@BlueRedTeam

#Red_Team

1. Domain Persistence - Machine Account
https://pentestlab.blog/2022/01/17/domain-persistence-machine-account
2. Shell command obfuscation to avoid SIEM/detection system
https://github.com/ariary/volana

@BlueRedTeam

#tools
OpenAPI Security Scanner:
discover authorization security issues
https://github.com/ngalongc/openapi_security_scanner#warning-before-use

@BlueRedTeam

#Red_Team
I'm putting together my class notes, practice results, and other information I accumulate over time on Red Team operation courses and work.

https://github.com/Raviikanth/working-assgmnt

@BlueRedTeam

#CVE-2021

Apache log4j2 CVE-20210-44228 poc

https://github.com/c4dr01d/CVE-2021-44228-poc

@BlueRedTeam

#Red_Team
#tools
1. A way to bypass multi-factor authentication (MFA) for Box accounts that use an SMS code for login verification
https://www.varonis.com/blog/box-mfa-bypass-sms
2. A tool for creating hidden accounts using the registry
https://github.com/wgpsec/CreateHiddenAccount

@BlueRedTeam

#Blue_Team

1. Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and auto-completion
https://github.com/StamusNetworks/suricata-language-server
2. Malicious Macros Analysis with OLETOOLS
https://infosecwriteups.com/maldoc101-malicious-macros-analysis-with-oletools-8be3cda84544

@BlueRedTeam

#Red_Team
My Collection of Red Team Tools Building

https://github.com/nobodyatall648/Red-Team-Tools-Collections

@BlueRedTeam

#CVE-2021

It is a nmap script for metabase vulnerability (CVE-2021-41277)

https://github.com/frknktlca/Metabase_Nmap_Script

@BlueRedTeam

#CVE-2021

It is a nmap script for GravCMS vulnerability (CVE-2021-21425)

https://github.com/frknktlca/GravCMS_Nmap_Script

@BlueRedTeam

#tools
#Blue_Team
1. Blueteam operational triage registry hunting/forensic tool
https://github.com/theflakes/reg_hunter
2. Check for LDAP protections regarding the relay of NTLM authentication
https://github.com/zyn3rgy/LdapRelayScan

@BlueRedTeam

#Red_Team

My Collection of Building Red Team Tools

https://github.com/TH3xACE/genAvatar

@BlueRedTeam

#exploit
- Unauthenticated RCE Chain in SysAid ITIL - CVE-2021-43971, CVE-2021-43972, CVE-2021-43973, CVE-2021-43974
https://www.atredis.com/blog/2022/1/5/unauthenticated-rce-chain-in-sysaid-itil
- CVE-2022-0219:
Improper Restriction of XML External Entity Reference in skylot/jadx
https://github.com/Haxatron/CVE-2022-0219

@BlueRedTeam

#Red_Team

TREVORproxy/TREVORspray 2.0 - Increasing the Speed and Effectiveness of Password Sprays

https://blog.blacklanternsecurity.com/p/introducing-trevorproxy-and-trevorspray

@BlueRedTeam

#tools
#Blue_Team

- beacon-fronting: A simple command line tool to help defender test their detections for network beacon patterns and domain fronting

https://github.com/BinaryDefense/beacon-fronting

- ICS Network Protocol Parsers

https://github.com/cisagov/ICSNPP

@BlueRedTeam

#Red_Team

Red Team

https://github.com/forensiva/RedTeam

@BlueRedTeam

#Blue_Team

1. A series of PowerShell scripts to automate collection of forensic artefacts in most Incident Response environments

https://github.com/hackjalstead/IRCP

2. Snooping on Android 12’s Privacy Dashboard

https://thebinaryhick.blog/2022/01/22/snooping-on-android-12s-privacy-dashboard
]-> Android Logs Events And Protobuf Parser:
https://github.com/abrignoni/ALEAPP

@BlueRedTeam

#exploit

CVE-2021-45467:
CWP CentOS Web Panel - preauth RCE

https://octagon.net/blog/2022/01/22/cve-2021-45467-cwp-centos-web-panel-preauth-rce
-

CVE-2021-30949:
XNU kernel use-after-free in mach_msg

https://bugs.chromium.org/p/project-zero/issues/detail?id=2232

@BlueRedTeam

#Blue_Team
Hunting with weak signals:
How to find malware with mutated strings and YARA rules
https://stairwell.com/news/hunting-with-weak-signals

@BlueRedTeam

Active Directory security check in seconds The PingCastle tool allows you to perform more than 100K AD security checks, without installation, administration or sending data "to the cloud", while generating a convenient report. Some of the checks include potential risks, so there may be occasional false positives.

https://github.com/vletoux/pingcastle

#redteam
#ad
@NetPentesters

#Red_Team

Red Team Reconnaissance Tool for Windows systems

https://github.com/bvoris/RedTeamRecon

@BlueRedTeam