APT – Telegram

Red Team Infrastructure Wiki

Wiki to collect Red Team infrastructure hardening resources

This wiki is intended to provide a resource for setting up a resilient Red Team infrastructure. It was made to complement Steve Borosh and Jeff Dimmock's BSides NoVa 2017 talk "Doomsday Preppers: Fortifying Your Red Team Infrastructure"

https://github.com/bluscreenofjeff/Red-Team-Infrastructure-Wiki

#collection #redteam

GitHub

GitHub - bluscreenofjeff/Red-Team-Infrastructure-Wiki: Wiki to collect Red Team infrastructure hardening resources

Wiki to collect Red Team infrastructure hardening resources - bluscreenofjeff/Red-Team-Infrastructure-Wiki

249 viewsedited 12:12

APT

An Empirical Assessment of Endpoint Detection and Response Systems against Advanced Persistent Threats Attack Vectors

https://res.mdpi.com/d_attachment/jcp/jcp-01-00021/article_deploy/jcp-01-00021.pdf

181 views19:21

APT

https://twitter.com/j0nh4t/status/1429049506021138437?s=21

#razer #windows #privesc

Twitter

jonhat

Need local admin and have physical access? - Plug a Razer mouse (or the dongle) - Windows Update will download and execute RazerInstaller as SYSTEM - Abuse elevated Explorer to open Powershell with Shift+Right click Tried contacting @Razer, but no answers.…

180 views07:49

APT

WMkick is a TCP protocol redirector/MITM tool that targets NTLM authentication message flows in WMI (135/tcp) and Powershell-Remoting/WSMan/WinRM (5985/tcp) to capture NetNTLMv2 hashes.

Responder

https://github.com/KoreLogicSecurity/wmkick

GitHub

GitHub - KoreLogicSecurity/wmkick: WMkick is a TCP protocol redirector/MITM tool that targets NTLM authentication message flows…

189 views12:54

APT

https://github.com/bigb0sss/RedTeam-OffensiveSecurity

#RedTeam

GitHub

GitHub - bigb0sss/RedTeam-OffensiveSecurity: Tools & Interesting Things for RedTeam Ops

Tools & Interesting Things for RedTeam Ops. Contribute to bigb0sss/RedTeam-OffensiveSecurity development by creating an account on GitHub.

207 views13:50

APT

Active Directory Penetration Testing Cheatsheet

https://infosecwriteups.com/active-directory-penetration-testing-cheatsheet-5f45aa5b44ff

#AD #pentest #cheatsheet

200 views07:54

APT

Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a variety of supported platforms.

https://github.com/projectdiscovery/notify

GitHub

GitHub - projectdiscovery/notify: Notify is a Go-based assistance package that enables you to stream the output of several tools…

Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a variety of supported platforms. - projectdiscovery/notify

198 views18:51

APT

https://www.mdmandgpanswers.com/blogs/view-blog/the-ultimate-guide-to-printnightmare-and-overcoming-it

MDMGPAnswers.com

View Blog

Where SMART MDM & Group Policy Admins come to Get Smarter.

178 views21:49

APT

https://twitter.com/a13xp0p0v/status/1430845177242046464?s=21

#zeronights

Twitter

Alexander Popov

I've published the article covering my talk at @ZeroNights! Improving the exploit for CVE-2021-26708 in the Linux kernel to bypass LKRG a13xp0p0v.github.io/2021/08/25/lkr… Slides: a13xp0p0v.github.io/img/CVE-2021-2… PoC exploit demo video: youtube.com/watch?v=O6rsuG……

173 views07:58

APT

CHAOSDB

Critical Vulnerability in Microsoft Azure Cosmos DB

https://chaosdb.wiz.io/

#azure #chaosdb

Wiz

ChaosDB: Unauthorized Privileged Access to Microsoft Azure Cosmos DB

A critical vulnerability in Azure's flagship Cosmos DB service affecting thousands of customers. Mitigation requires customers' manual actions.

189 views15:40

APT

https://github.com/EasyHook/EasyHook

GitHub

GitHub - EasyHook/EasyHook: EasyHook - The reinvention of Windows API Hooking

EasyHook - The reinvention of Windows API Hooking. Contribute to EasyHook/EasyHook development by creating an account on GitHub.

197 views20:06

APT

https://www.thezdi.com/blog/2021/8/30/proxytoken-an-authentication-bypass-in-microsoft-exchange-server

Zero Day Initiative

Zero Day Initiative — ProxyToken: An Authentication Bypass in Microsoft Exchange Server

Continuing with the theme of serious vulnerabilities that have recently come to light in Microsoft Exchange Server, in this article we present a new vulnerability we call ProxyToken. It was reported to the Zero Day Initiative in March 2021 by researcher Le…

231 views21:28

APT

#tools #opensource
Let's check our community power 🙂
If you are involved in devsecops, please support this feature and write your +1 or any suggestion as well.

https://github.com/DefectDojo/django-DefectDojo/issues/5006

GitHub

APIv2: Add feature of linking manually created JIRA tasks to finding · Issue #5006 · DefectDojo/django-DefectDojo

Is your feature request related to a problem? Please describe This feature is not related to any problem directly, however, it may add useful functionalities. Describe the solution you'd li...

247 views12:05

APT

CVE-2021-26084.sh

1.5 KB

Confluence RCE Exploit - CVE-2021-26084

#exploit #confluecne

332 views12:06

APT

https://shenaniganslabs.io/2021/04/13/Airstrike.html

Shenanigans Labs