​BlueTeam.Lab

This project contains a set of Terraform and Ansible scripts to create an orchestrated BlueTeam Lab.

The goal of this project is to provide the red and blue teams with the ability to deploy an ad-hoc detection lab to test various attacks and forensic artifacts on the latest Windows environment and then to get a 'SOC-like' view into generated data.

https://github.com/op7ic/BlueTeam.Lab

#blueteam #techniques #cybersecurity #infosec

🔥Wanderer is an open-source program that collects information about running processes. This information includes the integrity level, the presence of the AMSI as a loaded module, whether it is running as 64-bit or 32-bit as well as the privilege level of the current process.
This information is extremely helpful when building payloads catered to the ideal candidate for process injection.

🔥🔥🔥MeshyJSON: A TP-Link tdpServer JSON Stack Overflow

This blog post describes a vulnerability found and exploited in November 2022 by NCC Group. The target was the TP-Link AX1800 WiFi 6 Router (Archer AX21). It was running hardware version 3.6 and firmware version 1.1.1 (Archer AX21(US)_V3.6_1.1.1 Build 20220603). The vulnerability was patched on 2nd of December 2022 with firmware version 1.1.3 (Archer AX21(US)_V3.6_1.1.3 Build 20221125).

#Threat_Research
EntryBleed: Breaking KASLR under KPTI with Prefetch (CVE-2022-4543)
https://www.willsroot.io/2022/12/entrybleed.html
]-> https://seclists.org/oss-sec/2022/q4/198

Wi-Fi Surveyor

Visualize Wi-Fi signal strength over a geographic area.

https://github.com/ecoAPM/WiFiSurveyor

CrimeFlare - This tool can help you to see the real IP behind CloudFlare protected websites.

https://github.com/zidansec/CrimeFlare

FCracker - is a command-line tool designed to brute force encrypted files like zip, 7z, rar, pdf, gpg etc.

▪️https://github.com/TarunYenni/FCracker

Heartbleed vulnerability exploited🩸

▪️https://github.com/Saiprasad16/Heartbleed

#hackgit #github #soft #Heartbleed