HSC24RedTeamInfra

HSC24RedTeamInfra Slides and Codes used for the workshop Red Team Infrastructure Automation...

OWASP-Top-10-Neocloud-and-AI-Data-Center-Security-Risks

The Top 10 Neocloud and AI Data Center Security Risks FORGE - Harden the metal beneath the model. 🌐 Website: https://forge-framework.io Executive Summary Neoclouds and AI data centers are being built faster than they are being secured. The rapid expansion of neoclouds GPU cloud providers, AI data...

Red-Team-Infrastructure-Wiki

This wiki is intended to provide a resource for setting up a resilient Red Team infrastructure. It was made to complement Steve Borosh @424f424f and Jeff Dimmock's @bluscreenofjeff BSides NoVa 2017 talk "Doomsday Preppers: Fortifying Your Red Team Infrastructure" slides If you have an addition...

abaddon

Abaddon Red team operations involve miscellaneous skills, last several months and are politically sensitive; they require a lot of monitoring, consolidating and caution. Wavestone’s red team operations management software, Abaddon, has been designed to make red team operations faster, more...

abaddon

Abaddon Las operaciones de red team implican habilidades variadas, duran varios meses y son políticamente sensibles; requieren mucha monitorización, consolidación y precaución. El software de gestión de operaciones de red team de Wavestone, Abaddon, ha sido diseñado para hacer las operaciones de...

metabadger

Metabadger Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 IMDSv2. Metabadger Purpose and functionality Diagnose and evaluate your current usage of the AWS Instance Metadata Service along with understanding how the service works Prepare you t...

C2-Tracker

C2 Tracker C2 Tracker es un feed de IOC gratuito, impulsado por la comunidad, que utiliza búsquedas en Shodan yCensys para recolectar direcciones IP de infraestructura conocida de malware/botnet/C2. Este Proyecto ha sido Archivado Este proyecto ha sido archivado. Los archivos de texto en data/ se...

hostresolver

HostResolver Versión actual: 1.0.0 Envíe comentarios e informes de errores a: [email protected] ==================================================================================== Contenido: 1. Resumen 2. Uso de HostResolver Archivos de entrada Opciones y configuración Escaneo Salida...

CVE-2026-27636

Passive reconnaissance and fingerprinting tool for detecting FreeScout deployments and analyzing exposure related to CVE-2026-28289. This script focuses on safe infrastructure intelligence gathering rather than exploitation. It helps researchers and defenders understand how FreeScout instances ar...

CVE-2026-33634-Scanner

CVE-2026-33634-Scanner Automated scanner for detecting indicators of compromise IOCs associated with the TeamPCP supply chain attack CVE-2026-33634 📋 Table of Contents Overview Vulnerability Features Detected IOCs Installation Usage Examples Report Format Project Structure System Requirements...

CVE-2026-12405

A flaw was found in rubygem-foremanremoteexecution. A command injection vulnerability exists in the Red Hat Satellite API /api/v2/jobinvocations. When a job template has the effectiveuser property marked as overridable: true, the application fails to properly sanitize the effectiveuser input...

Dropper-GCleaner-C2-Infrastructure-Kernel-Driver-PowerShell-Conhost-Payload-Analysis

1. C2 Infrastructure – Resilient & Redundant Servers Process Hacker memory analysis reveals a comprehensive list of domains used by Dropper GCleaner for C2 communication. These domains are hosted on various platforms Scaleway, Render, Replit, etc., indicating a robust and redundant infrastructure...

CVE-2026-12544 Foreman: ssti and insecure deserialization in foreman-rake configuration

A flaw was found in Foreman. The foreman-rake initialization logic in /usr/share/foreman/config/settings.rb contains a vulnerable code pattern where configuration data is processed through two distinct executable layers. This creates a multi-stage execution chain that allows for both Server-Side...

CVE-2026-12544 Foreman: ssti and insecure deserialization in foreman-rake configuration

A flaw was found in Foreman. The foreman-rake initialization logic in /usr/share/foreman/config/settings.rb contains a vulnerable code pattern where configuration data is processed through two distinct executable layers. This creates a multi-stage execution chain that allows for both Server-Side...

PHP-8.1.0-dev-Backdoor

PHP 8.1.0-dev User-Agentt Backdoor Remote Code Execution RCE Severity: Critical CVSS Equivalent: 10.0 Vulnerability Type: Supply Chain Backdoor / Remote Code Execution RCE Affected Software: PHP 8.1.0-dev Development Build Only Attack Vector: Remote Unauthenticated Authentication Required: No Use...

CVE-2023-44487-HTTP-2-Rapid-Reset-Attack

PoC - CVE-2023-44487: HTTP/2 Rapid Reset Attack Este repositorio contiene un Proof of Concept PoC para demostrar la explotación de la vulnerabilidad CVE-2023-44487 , también conocida como HTTP/2 Rapid Reset Attack. Esta vulnerabilidad afecta al protocolo HTTP/2 y permite a un atacante sobrecargar...

foreman: SSTI and insecure deserialization in foreman-rake configuration

A flaw was found in Foreman. The foreman-rake initialization logic in /usr/share/foreman/config/settings.rb contains a vulnerable code pattern where configuration data is processed through two distinct executable layers. This creates a multi-stage execution chain that allows for both Server-Side...

CVE-2026-66248

The HCL iControl software is affected by an Improper Error Handling vulnerability. This flaw could allow an unauthenticated attacker to trigger verbose database and system errors. Such errors may disclose sensitive internal infrastructure details , which could be leveraged to plan advanced target...

veeam-cve-2023-27532-mock

CVE-2023-27532 - Vulnerabilidad en Veeam Backup & Replication Descripción de la vulnerabilidad Veeam Backup & Replication contiene una vulnerabilidad que permite obtener las credenciales cifradas almacenadas en la base de datos de configuración, lo que permite a los atacantes acceder a los hosts ...

commvault-cve2025-34028-check

infra-monitor infra-monitor es un script NSE de Nmap ligero para probar silenciosamente la consistencia de respuestas en rutas de infraestructura web. Ayuda a detectar anomalías en el control de acceso, discrepancias de configuración o posibles inconsistencias en cómo responden los diferentes...