APT

Blue Team Notes A collection of one-liners, small scripts, and some useful tips for blue team work. https://github.com/Purp1eW0lf/Blue-Team-Notes #blueteam #cheatsheet

SharpSystemTriggers Collection of remote authentication triggers in C# https://github.com/cube0x0/SharpSystemTriggers #coerce #authentication #petitpotam #spoolsample #dcom

For someone, who didn't notice this link in our posts https://j00ru.vexillium.org/syscalls/nt/64/

LFI Bypass 1) /usr/bin/cat /etc/passwd == /???/???/c?t$IFS/?t?/p?s?wd 2) /*/?at$IFS/???/???swd 3)/****/?at$IFS/???/*swd 4)/****/?at$IFS/???/*******swd (IFS is Internal Field Separator = [space], [tab] or a [newline]) #bugbounty #bugbountytips #lfi

#meme Sad 🙁 https://hackerone.com/reports/1209098

Using Kerberos for Authentication Relay Attacks https://googleprojectzero.blogspot.com/2021/10/using-kerberos-for-authentication-relay.html #kerberos #relay

C3 Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits. https://github.com/FSecureLABS/C3 #c2 #cobaltstrike #redteam

OffensiveVBA This repo covers some code execution and AV Evasion methods for Macros in Office documents https://github.com/S3cur3Th1sSh1t/OffensiveVBA #vba #offensive #maldoc

Advanced Maldoc Techniques MS Office File Formats — Advanced Malicious Document (Maldoc) Techniques # https://medium.com/walmartglobaltech/ms-office-file-formats-advanced-malicious-document-maldoc-techniques-b5f948950fdf Evasive VBA — Advanced Maldoc Techniques # https://medium.com/walmartglobaltech/evasive-vba-advanced-maldoc-techniques-1365e9373f80 VBA Stomping — Advanced Maldoc Techniques # https://medium.com/walmartglobaltech/vba-stomping-advanced-maldoc-techniques-612c484ab278 VBA Project Locked — Project is Unviewable # https://medium.com/walmartglobaltech/vba-project-locked-project-is-unviewable-4d6a0b2e7cac #vba #maldoc #advanced

Utilizing Programmatic Identifiers (ProgIDs) for UAC Bypasses https://v3ded.github.io/redteam/utilizing-programmatic-identifiers-progids-for-uac-bypasses #uac #bypass #progid

Jira Unauthenticated Access to Screens Exploit:

jira.example.com/rest/api/2/screens 

Note: Depends on the Program, some accept it and some consider this Informational. #jira #bugbounty

LOLBAS WorkFolders.exe "C:\Windows\System32\WorkFolders.exe" (signed by MS) can be used to run arbitrary executables in the current working directory with the name control.exe. It's like a new rundll32.exe lolbin but for EXEs! #lolbin #lolbas

ZipExec Is a Proof-of-Concept (POC) tool to wrap binary-based tools into a password-protected zip file. This zip file is then base64 encoded into a string that is rebuilt on disk. This encoded string is then loaded into a JScript file that when executed, would rebuild the password-protected zip file on disk and execute it. This is done programmatically by using COM objects to access the GUI-based functions in Windows via the generated JScript loader, executing the loader inside the password-protected zip without having to unzip it first. By password protecting the zip file, it protects the binary from EDRs and disk-based or anti-malware scanning mechanisms. https://github.com/Tylous/ZipExec #redteam #netsec

Shellcode Injection Techniques A collection of C# shellcode injection techniques. All techniques use an AES encrypted meterpreter payload. https://github.com/plackyhacker/Shellcode-Injection-Techniques #inject #shellcode #csharp

Kubernetes Security Checklist and Requirements https://github.com/Vinum-Security/kubernetes-security-checklist #kubernetes #checklist

LSASS Encrypted Dump https://sp00ks-git.github.io/posts/LSASS-Encrypted-Dump/ #lsass #dump

Offensive WMI - Active Directory Enumeration (Part 5) https://0xinfection.github.io/posts/wmi-ad-enum/ #wmi