RedTeams

import os
import sys
try:
	import pefile
	import argparse
	import requests
	from bs4 import BeautifulSoup
except ImportError as e:
	print("[-] One of the following module is not installed:")
	print("\t- bs4")

RedTeams

#include <string.h>
#include <stdio.h>
#include <windows.h>
#include <psapi.h>
#include "beacon.h"


DECLSPEC_IMPORT BOOL WINAPI KERNEL32$K32EnumProcesses(DWORD *, DWORD, LPDWORD);
DECLSPEC_IMPORT WINBASEAPI HANDLE WINAPI KERNEL32$OpenProcess(DWORD, BOOL, DWORD);
DECLSPEC_IMPORT BOOL WINAPI KERNEL32$K32EnumProcessModulesEx(HANDLE, HMODULE*, DWORD, LPDWORD, DWORD);

RedTeams

// Twitter thread: https://twitter.com/_xpn_/status/1543682652066258946 (was a bit bored ;)
// Needs to be run on the SCCM server containing the "Microsoft Systems Management Server" CSP for it to work.

using System;
using System.Collections.Generic;
using System.Runtime.InteropServices;

namespace SCCMDecryptPOC
{
    internal class Program

RedTeams

using System;
using System.Collections.Generic;
using System.IO;
using System.Reflection;
using System.Security.Cryptography;

/// <summary>
/// A class for loading an Embedded Assembly
/// </summary>
/// <remarks>

RedTeams

# Get Computer List
# Get-ADComputer -Filter {(OperatingSystem -like "*windows*")} | select DNSHostName | ConvertTo-Csv -NoTypeInformation | % { $_ -replace '"', ''}  | out-file .\ComputerList.txt 
# Download Checker : https://github.com/fourtwizzy/CVE-2019-0708-Check-Device-Patch-Status
#. ./Get-TermDDVersion.ps1
# $Servers = Get-Content .\ComputerList.txt
# Get-TermDDVersion -ComputerName $Servers | select Computer,FQDN,OS,Patched,ExpectedVersion,ActualVersion,UpTime,Message | Export-Csv .\$(Get-Date -Format "yyyy-MMdd")-CVE-2019-0708-PatchStatus.csv -NoTypeInformation

RedTeams

GitHub for Bug Bounty Hunters

GitHub repositories can disclose all sorts of potentially valuable information for bug bounty hunters. The targets do not always have to be open source for there to be issues. Organization members and their open source projects can sometimes accidentally expose information that could be used against the target company. in this article I will give you a brief overview that should help you get started targeting GitHub repositories for vulnerabilities and for general recon.

Mass Cloning

You can just do your research on github.com, but I would suggest cloning all the target's repositories so that you can run your tests locally. I would highly recommend @mazen160's GitHubCloner. Just run the script and you should be good to go.

$ python githubcloner.py --org organization -o /tmp/output

RedTeams

#!/bin/sh
#
#  sshd setup script for gRPC Jenkins windows worker.
#
#  Prerequisites:
#    — MSYS2 itself: http://sourceforge.net/projects/msys2/
#    — admin tools: pacman -S openssh cygrunsrv mingw-w64-x86_64-editrights
#
#  This script is a cleaned up and improved version of the procedure initially
#  found at https://ghc.haskell.org/trac/ghc/wiki/Building/Windows/SSHD

RedTeams

A small collection specialised scripts for Active Directory.

Includes:

• Compare-ADMemberOf
• Get-ADSystemInfo
• Get-GroupMemberTree
• Get-LdapObject
• Get-MemberOfTree
• Test-LdapSslConnection

RedTeams

rpc
filter
add rule layer=um actiontype=permit
add condition field=if_uuid matchtype=equal data=<uuidguid>
add condition field=auth_type matchtype=equal data=16
add condition field=auth_level matchtype=equal data=6
add filter
add rule layer=um actiontype=block
add condition field=if_uuid matchtype=equal data=<uuidguid>
add filter

RedTeams

//sample dll

#define WIN32_LEAN_AND_MEAN
#include <windows.h>

BOOL WINAPI DllMain(HINSTANCE hInstance, DWORD dwReason, LPVOID lpData)
{
	switch(dwReason)
	{
		case DLL_PROCESS_ATTACH: