Beginners Field Guide: Where & How to Learn OSINT


This is not a comprehensive collection of resources. This collection is based on my own time spent on open-source intelligence. There are a million links with OSINT tools that can get the job done but this post is curated to point you in the right direction to obtain the necessary skills and mindset to get the job done. — EXTRA SECTION — FRAMEWORK FOR BEGINNERS

https://medium.com/the-sleuth-sheet/beginners-field-guide-where-how-to-learn-osint-bd2e11469f31

@OsintBlackBox

#Red_Team

These are tools I cheated with the help of ChatGPT to help me with Penetration Testing and Red Teaming

https://github.com/sho-luv/chatgpt_created_tools

@BlueRedTeam

#CVE-2023
CVE-2023-0669 Encrpytion helper
https://github.com/yosef0x01/CVE-2023-0669

Poc for CVE-2023-23752 (joomla CMS)

https://github.com/WhiteOwl-Pub/CVE-2023-23752

@BlueRedTeam

#webshell

php webshell
https://github.com/n01ep3rz/upsilon-shell

webshell
https://github.com/cannibal-hannibal/Tess

A secure webshell

https://github.com/mickael-kerjean/webpty

@BlueRedTeam

#Red_Team

Tools for Red Teaming

https://github.com/GenNiox/RedTeaming

@BlueRedTeam

#Red_Team

Red team penetration testing, intranet asset detection, general vulnerability scanning, weak password blasting, port forwarding, intranet penetration, SOCK5

https://github.com/rustgopy/RGPScan

@BlueRedTeam

#webshell

A Python script that connects to a webshell to create a sudo-interactive terminal session.

https://github.com/malwaredetective/pyshell

php webshell

https://github.com/devilbhai/webshell

@BlueRedTeam

#Red_Team

Materials for the workshop \"Red Team Ops: Havoc 101\"

https://github.com/WesleyWong420/RedTeamOps-Havoc-101

@BlueRedTeam

#Cobalt_Strike

Basic implementation of Cobalt Strikes - User Defined Reflective Loader feature

https://github.com/Mav3rick33/ZenLdr

@BlueRedTeam

#Red_Team

Recon scripts for Red Team and Web blackbox auditing

https://github.com/mtimani/Recon_scripts

@BlueRedTeam

#Cobalt_Strike

It's just un implementation of in-house CoffLoader supporting #CobaltStrike standard BOF and BSS initialized variables.

Look at the main.c file to change the BOF and its parameters. CobalStrike handles the BOF parameter in a special way, the Arg structure is here to pass parameters easier.

https://github.com/OtterHacker/CoffLoader

@BlueRedTeam

​​Python parser for #Cobalt_Strike stagers

Use parse_stager_config.py to search a file for Cobalt Strike stager shellcode. If shellcode is found, it will be extracted in JSON format.

https://github.com/stairwell-inc/cobalt-strike-stager-parser

@BlueRedTeam

#Red_Team
Red Teaming Toolkit

https://github.com/infosecn1nja/Red-Teaming-Toolkit
#Book
@BlueRedTeam

#Red_Team

Red Team Tools

https://github.com/wahdanEw/Red-Team-Tools

@BlueRedTeam

#Cobalt_Strike

Repository for archiving Cobalt Strike configuration

https://github.com/XRSec/CobaltStrike-Docker

@BlueRedTeam

#Red_Team

Collection of tooling to use on Red Team engagements.

https://github.com/burnbrian/redteam-tooling

A curated list of Cybersecurity tools for Penetration Testing or Red Teaming.

https://github.com/q0phi80/CybersecurityTools

Eden Red Teaming

https://github.com/Eden-Advisory/altakahun

@BlueRedTeam

#Cobalt_Strike

All in 1 repo for anything and everything I work with that is Cobalt Strike related.

https://github.com/Altoid0/CobaltStrike-Library

@BlueRedTeam

#webshell

A simple, yet sample, Rust webshell

https://github.com/zinzloun/Sirus

@BlueRedTeam

#Red_Team

Collection of tooling to use on Red Team engagements.

https://github.com/burnbrian/redteam-utilities

@BlueRedTeam

#Red_Team

Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase.

https://github.com/PaulNorman01/Forensia

@BlueRedTeam

#Cobalt_Strike

Support Cobalt Strike's security assessment of other platforms (Linux/MacOS/...), and include the development support of Unix post-penetration module.

https://github.com/gloxec/CrossC2

Wiki 📖 https://gloxec.github.io/CrossC2/en/

@BlueRedTeam