Red Blue Team

Hook, Line, and Phishlet: Conquering AD FS with Evilginx https://research.aurainfosec.io/pentest/hook-line-and-phishlet/

Privileger is a tool to work with Windows Privileges https://github.com/MzHmO/Privileger

vulscan - Vulnerability Scanning with Nmap Vulscan is a module which enhances nmap to a vulnerability scanner. The nmap option -sV enables version detection per service which is used to determine potential flaws according to the identified product. The data is looked up in an offline version of VulDB. Vulnerability Database: There are the following pre-installed databases available at the moment: scipvuldb.csv - https://vuldb.com cve.csv - https://cve.mitre.org securityfocus.csv - https://www.securityfocus.com/bid/ xforce.csv - https://exchange.xforce.ibmcloud.com/ expliotdb.csv - https://www.exploit-db.com openvas.csv - http://www.openvas.org securitytracker.csv - https://www.securitytracker.com (end-of-life) osvdb.csv - http://www.osvdb.org (end-of-life) https://github.com/scipag/vulscan

Uncover the Top 10 MITRE ATT&CK Techniques Based on the analysis of over 500,000 malware samples, The Red Report 2023 identifies most prevalent MITRE ATT&CK tactics and techniques leveraged by attackers. Download this new report to obtain valuable insights to strengthen your organization’s security posture against the latest threats. Download link: https://www.picussecurity.com/hubfs/RedReport2023/RedReport2023-Picus.pdf

Awesome-web3-Security A curated list of web3Security materials and resources For Pentesters and Bug Hunters. https://github.com/Anugrahsr/Awesome-web3-Security #Red_Team

NucleiFuzzer = Nuclei + Paramspider #Red_Team NucleiFuzzer is a powerful automation tool for detecting xss,sqli,ssrf,open-redirect..etc vulnerabilities in web applications. NucleiFuzzer is an automation tool that combines ParamSpider and Nuclei to enhance web application security testing. It uses ParamSpider to identify potential entry points and Nuclei's templates to scan for vulnerabilities https://github.com/0xKayala/NucleiFuzzer

Credential Dumping – Active Directory Reversible Encryption Introduction According to MITRE, an adversary may abuse Active Directory authentication encryption properties to gain access to credentials on Windows systems. The AllowReversiblePasswordEncryption property specifies ——————————————————- https://www.hackingarticles.in/credential-dumping-active-directory-reversible-encryption/

Diafan CMS 6.0 - Reflected Cross-Site Scripting (XSS) exploit https://sploitus.com/exploit?id=EDB-ID:51529 Jobpilot v2.61 - SQL Injection Vulnerability exploit https://sploitus.com/exploit?id=1337DAY-ID-38800 The Shop v2.5 - SQL Injection Vulnerability exploit https://sploitus.com/exploit?id=1337DAY-ID-38798 WordPress Medic Theme v1.0.0 - Weak Password Recovery Mechanism for Forgotten Password Exploit exploit https://sploitus.com/exploit?id=1337DAY-ID-38804 Symantec SiteMinder WebAgent v12.52 - Cross-site scripting (XSS) exploit https://sploitus.com/exploit?id=EDB-ID:51530 WordPress Theme Medic v1.0.0 - Weak Password Recovery Mechanism for Forgotten Password exploit https://sploitus.com/exploit?id=EDB-ID:51531 Groomify v1.0 - SQL Injection Vulnerability exploit https://sploitus.com/exploit?id=1337DAY-ID-38799 Diafan CMS 6.0 - Reflected Cross-Site Scripting Vulnerability exploit https://sploitus.com/exploit?id=1337DAY-ID-38801 Symantec SiteMinder WebAgent v12.52 - Cross-site scripting Vulnerability exploit https://sploitus.com/exploit?id=1337DAY-ID-38803 The Shop v2.5 - SQL Injection exploit https://sploitus.com/exploit?id=EDB-ID:51525 Student Study Center Management System v1.0 - Stored Cross-Site Scripting Vulnerability exploit https://sploitus.com/exploit?id=1337DAY-ID-38802 Student Study Center Management System v1.0 - Stored Cross-Site Scripting (XSS) exploit https://sploitus.com/exploit?id=EDB-ID:51528 Groomify v1.0 - SQL Injection exploit https://sploitus.com/exploit?id=EDB-ID:51526 Jobpilot v2.61 - SQL Injection exploit https://sploitus.com/exploit?id=EDB-ID:51527 Exploit for Improper Privilege Management in Wpdeveloper Reviewx exploit https://sploitus.com/exploit?id=26859AB8-2F07-5DDE-BCF9-43BC1B71A140

#Red_Team #Book

"Above" Network Vulnerability Scanner fully autonomous and works in passive mode, creating no noise on the air. It supports 18 protocols: MACSec DTP EDP CDP LLDP MNDP OSPF EIGRP VRRP HSRP ESRP GLBP STP PVST LLMNR NBT-NS MDNS DHCPv6 https://github.com/c4s73r/Above #Red_Team

#Red_Team CVE-2023-34362: MOVEit Transfer Unauthenticated RCE https://github.com/sfewer-r7/CVE-2023-34362

Active Directory Security Guide

#Blue_Team

the Deepfake Offensive Toolkit dot (aka Deepfake Offensive Toolkit) makes real-time, controllable deepfakes ready for virtual cameras injection. identity verification and video conferencing systems, for the use by security analysts, Red Team members, and…

the Deepfake Offensive Toolkit dot (aka Deepfake Offensive Toolkit) makes real-time, controllable deepfakes ready for virtual cameras injection. identity verification and video conferencing systems, for the use by security analysts, Red Team members, and biometrics researchers. https://github.com/sensity-ai/dot #Red_Team

Exploit for SQL Injection in Osgeo Geoserver exploit https://sploitus.com/exploit?id=1E160E89-84F9-5C59-8AD3-AA10716AD031

Thruk Monitoring Web Interface 3.06 - Path Traversal exploit. https://sploitus.com/exploit?id=EDB-ID:51509