Search JS using Gau

gau -subs DOMAIN |grep -iE '\.js'|grep -iEv '(\.jsp|\.json)' >> js.txt

#bugbounty #bugbountytips

The Red Team Vade Mecum

https://kwcsec.gitbook.io/the-red-team-handbook/

#redteam #cheatsheet

https://github.com/dmaasland/proxyshell-poc/blob/main/proxyshell_rce.py

#ProxyShell #RCE

#RCE #Chrome

https://tiszka.com/blog/CVE_2021_21225.html

https://tiszka.com/blog/CVE_2021_21225_exploit.html

https://gist.github.com/cd789/bbc6a6fea4c22c10d7f3a57472f4a235

TIGMINT - OSINT GUI software framework

https://github.com/TIGMINT/TIGMINT

#social #media #Intelligence #OSINT #TwitterAnalyser

Red Team Infrastructure Wiki

Wiki to collect Red Team infrastructure hardening resources

This wiki is intended to provide a resource for setting up a resilient Red Team infrastructure. It was made to complement Steve Borosh and Jeff Dimmock's BSides NoVa 2017 talk "Doomsday Preppers: Fortifying Your Red Team Infrastructure"

https://github.com/bluscreenofjeff/Red-Team-Infrastructure-Wiki

#collection #redteam

An Empirical Assessment of Endpoint Detection and Response Systems against Advanced Persistent Threats Attack Vectors

https://res.mdpi.com/d_attachment/jcp/jcp-01-00021/article_deploy/jcp-01-00021.pdf

https://twitter.com/j0nh4t/status/1429049506021138437?s=21

#razer #windows #privesc

WMkick is a TCP protocol redirector/MITM tool that targets NTLM authentication message flows in WMI (135/tcp) and Powershell-Remoting/WSMan/WinRM (5985/tcp) to capture NetNTLMv2 hashes.

Responder

https://github.com/KoreLogicSecurity/wmkick

Active Directory Penetration Testing Cheatsheet

https://infosecwriteups.com/active-directory-penetration-testing-cheatsheet-5f45aa5b44ff

#AD #pentest #cheatsheet

Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a variety of supported platforms.

https://github.com/projectdiscovery/notify

CHAOSDB

Critical Vulnerability in Microsoft Azure Cosmos DB

https://chaosdb.wiz.io/

#azure #chaosdb