https://threatpost.com/microsoft-unpatched-printnightmare-zero-day/168613/

#news #nightmare

Resolve domains into IP address:

while read l; do ip=$(dig +short $l | grep -oE "\b([0-9]{1,3}\.){3}[0-9]{1,3}\b"|head -1);echo "[+] '$l' => $ip";echo $ip >> ips.txt;done < domains.txt

#cybersecuritytips #bugbounty

https://github.com/khast3x/Redcloud

#redteam #infra #docker

https://github.com/dmaasland/proxyshell-poc

#poc #proxyshell

PowerShell cmdlets for ProxyShell

Here is a list of PowerShell cmdlets you can use with ProxyShell.
Don't focus exclusively on "New-ManagementRoleAssignment" or "New-MailExportRequest".

https://gist.github.com/dmaasland/38bb8fbd05c764bab1baa441b4416317

#proxyshell #cmdlets

Search Subdomains using Jldc

curl -s "jldc.me/anubis/subdomains/example.com" | grep -Po '(?<=")[\w*.-]*(?=")'

#bugbounty #bugbountytips

Search JS using Gau

gau -subs DOMAIN |grep -iE '\.js'|grep -iEv '(\.jsp|\.json)' >> js.txt

#bugbounty #bugbountytips

The Red Team Vade Mecum

https://kwcsec.gitbook.io/the-red-team-handbook/

#redteam #cheatsheet

https://github.com/dmaasland/proxyshell-poc/blob/main/proxyshell_rce.py

#ProxyShell #RCE

#RCE #Chrome

https://tiszka.com/blog/CVE_2021_21225.html

https://tiszka.com/blog/CVE_2021_21225_exploit.html

https://gist.github.com/cd789/bbc6a6fea4c22c10d7f3a57472f4a235

TIGMINT - OSINT GUI software framework

https://github.com/TIGMINT/TIGMINT

#social #media #Intelligence #OSINT #TwitterAnalyser

Red Team Infrastructure Wiki

Wiki to collect Red Team infrastructure hardening resources

This wiki is intended to provide a resource for setting up a resilient Red Team infrastructure. It was made to complement Steve Borosh and Jeff Dimmock's BSides NoVa 2017 talk "Doomsday Preppers: Fortifying Your Red Team Infrastructure"

https://github.com/bluscreenofjeff/Red-Team-Infrastructure-Wiki

#collection #redteam

An Empirical Assessment of Endpoint Detection and Response Systems against Advanced Persistent Threats Attack Vectors

https://res.mdpi.com/d_attachment/jcp/jcp-01-00021/article_deploy/jcp-01-00021.pdf

https://twitter.com/j0nh4t/status/1429049506021138437?s=21

#razer #windows #privesc

WMkick is a TCP protocol redirector/MITM tool that targets NTLM authentication message flows in WMI (135/tcp) and Powershell-Remoting/WSMan/WinRM (5985/tcp) to capture NetNTLMv2 hashes.

Responder

https://github.com/KoreLogicSecurity/wmkick