Archive of APT phishing campaigns

This repository contains papers on APT groups, which include examples of emails used in the phishing campaigns. Often, papers on APT group attacks do not provide email examples, which prompted me to create a repository that specifically includes on papers containing phishing emails. This list will be gradually expanded. Contributions are welcome. For reliability, each link has been duplicated through web archive.

https://github.com/wddadk/Phishing-campaigns

Virtual machine focused on research in the field of OSINT. It has rich functionality and many up-to-date tools. In addition to the software, you will find a rich set of various cheat sheets, browser extensions (Mozilla and GH) and other necessary resources that will help you in your investigation.

https://github.com/midnit3Z0mbi3/Kali-Linux-OSINT-VM

#IoT_Security
"Towards Weaknesses and Attack Patterns Prediction for IoT Devices", 2024.
]-> IoT CWE/CAPEC Datasets:
https://github.com/criveraalvarez/IoT_CWE-CAPEC_Dataset

#exploit
1. CVE-2022-22265:
Samsung NPU driver
https://soez.github.io/posts/CVE-2022-22265-Samsung-npu-driver

2. Streaming vulnerabilities from Windows Kernel - Proxying to Kernel
https://devco.re/blog/2024/08/23/streaming-vulnerabilities-from-windows-kernel-proxying-to-kernel-part1-en

Deep-HLR - the script retrieves social network accounts subscribed to the number (Amazon, Badoo, Bumble, Microsoft, Skype, Telegram, Twitter, Uber, Xiaomi, Bukalapak, Google Duo, Kakaotalk, TikTok, Google Account, Linkedin, Battlenet, Instagram, CallerID, Yandex, VK, Economic Times, WhatsApp, Line, NextDoor, Remind, Flipkart, JD, Viber and Venmo), checks availability, connectivity, portability and assesses risk, extracts operator, checks if it is included in data leaks, Retrieves geographic location and device information associated with a phone number in json format. It uses the Defastra Deep Phone HLR Check API to work.

➡️https://github.com/e-m3din4/deep-hlr

#Backdoor compromised #Okta accounts via #Windows Okta Verify using attacker controlled passwordless keys

https://github.com/CCob/okta-terrify

Bypass LSA protection using the BYODLL technique

https://github.com/itm4n/PPLrevenant

#pentest #redteam #bypass

Antivirus databases contain millions of signatures, but Trojans still remain in the hacker's arsenal. Even public and well-known variants of Metasploit payloads, RAT variants and stealers can go undetected. How? Thanks to obfuscation! Even a PowerShell script can be hidden from the prying eyes of an antivirus.

• This repository contains a ton of useful techniques, examples and theory on the topic of manual obfuscation of PowerShell scripts. Well, most importantly, the contents of this repo are the result of trial and error by the author, who has extensive experience in conducting penetration tests.

➡ https://github.com/t3l3machus/PowerShell-Obfuscation-Bible

• Extras! Powershell for pentesters is a voluminous article that contains examples of various commands, tricks and useful things:

- Capture keystrokes;
- Extract Wi-Fi profiles and passwords;
- Retrieve saved browser passwords;
- Working with the network and uploading configurations;
- Uploading system information;
- Detailed uploading of information about running processes;
- Access to event logs;
- Execute scripts from the specified URL;
- Monitoring file system changes;
- Disable Windows Defender;
.... and a hundred more useful commands: https://redteamrecipe.com/

UNINSTALL ALL SYSTEM BLOATWARE APPS YOU DONT NEED IN YOUR PHONE.

Cross-platform GUI written in Rust using ADB to debloat non-rooted android devices. Improve your privacy, the security and battery life of your device.

https://github.com/0x192/universal-android-debloater?tab=readme-ov-file