Wishing: Webhook Phishing in Teams - Black Hills Information Security
March 15, 2024 at 10:22:34 AM UTC - permalink -

- https://www.blackhillsinfosec.com/wishing-webhook-phishing-in-teams/

SySS-Research/Seth: Perform a MitM attack and extract clear text credentials from RDP connections
March 11, 2024 at 11:13:35 AM UTC - permalink -

- https://github.com/SySS-Research/Seth

Attacking an EDR - Part 1
March 7, 2024 at 4:55:27 PM UTC - permalink -

- https://riccardoancarani.github.io/2023-08-03-attacking-an-edr-part-1/

Hijacking & Spoofing Context Menu Options | mr.d0x
March 7, 2024 at 1:08:52 PM UTC - permalink -

- https://mrd0x.com/sentinelone-persistence-via-menu-context/

A Thousand Sails, One Harbor - C2 Infra on Azure
March 1, 2024 at 6:26:23 PM UTC - permalink -

- https://0xdarkvortex.dev/c2-infra-on-azure/

LOTS Project - Living Off Trusted Sites
March 1, 2024 at 4:58:21 PM UTC - permalink -

- https://lots-project.com/

Homebrew for Initial Access: Simple yet Effective
July 21, 2023 at 4:57:54 PM UTC - permalink -

- https://blog.adversis.io/homebrew-for-initial-access-simple-yet-effective/

last-byte/PersistenceSniper: Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Made with ❤️ by @last0x00 and @dottor_morte
January 30, 2023 at 12:17:53 PM UTC * - permalink -

- https://github.com/last-byte/PersistenceSniper

muraenateam/muraena: Muraena is an almost-transparent reverse proxy aimed at automating phishing and post-phishing activities.
January 18, 2023 at 3:29:21 PM UTC - permalink -

- https://github.com/muraenateam/muraena

RedTeamOperations/Advanced-Process-Injection-Workshop
February 7, 2022 at 9:17:55 PM UTC - permalink -

- https://github.com/RedTeamOperations/Advanced-Process-Injection-Workshop

clong/DetectionLab: Automate the creation of a lab environment complete with security tooling and logging best practices
November 26, 2021 at 4:40:04 PM UTC * - permalink -

- https://github.com/clong/DetectionLab

Infosec Income Questionnaire v1 (Responses) - Google Sheets
November 25, 2021 at 12:37:29 AM UTC - permalink -

- https://docs.google.com/spreadsheets/d/19SDu4bjcLYFOr0fw3UGh-KeJp6IU1ApchVaTzZqhBuc/edit#gid=744824158

Aetsu/OffensivePipeline: OffensivePipeline allows to download, compile (without Visual Studio) and obfuscate C# tools for Red Team exercises.
November 19, 2021 at 7:32:38 PM UTC - permalink -

- https://github.com/Aetsu/OffensivePipeline

Targeted Workstation Compromise with SCCM | enigma0x3
November 7, 2021 at 11:50:22 PM UTC * - permalink -

- https://enigma0x3.net/2015/10/27/targeted-workstation-compromise-with-sccm/

Red Team Tips - Vincent Yiu
April 2, 2021 at 3:51:00 PM UTC - permalink -

- https://vincentyiu.com/red-team-tips

Company IPs
March 23, 2021 at 7:05:49 PM UTC - permalink -

- https://gist.github.com/curi0usJack/971385e8334e189d93a6cb4671238b10

BadOutlook for C2 | Optiv
March 20, 2021 at 1:01:53 AM UTC - permalink -

- https://www.optiv.com/explore-optiv-insights/source-zero/badoutlook-c2

aurel26/gpocheck: gpocheck
March 16, 2021 at 3:06:18 PM UTC - permalink -

- https://github.com/aurel26/gpocheck

Report2020CrowdStrikeGlobalThreatReport.pdf
February 17, 2021 at 2:41:11 PM UTC - permalink -

- https://go.crowdstrike.com/rs/281-OBQ-266/images/Report2020CrowdStrikeGlobalThreatReport.pdf

Subdomain Finder
January 15, 2021 at 2:19:44 PM UTC - permalink -

- https://subdomainfinder.c99.nl/