693 matches found
CISA Red Team’s Operations Against a Federal Civilian Executive Branch Organization Highlights the Necessity of Defense-in-Depth
EXECUTIVE SUMMARY In early 2023, the Cybersecurity and Infrastructure Security Agency CISA conducted a SILENTSHIELD red team assessment against a Federal Civilian Executive Branch FCEB organization. During SILENTSHIELD assessments, the red team first performs a no-notice, long-term simulation of...
CVE-2024-27292
creationtimestamp| type| source ---|---|--- 2024-07-01 11:07:29+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/8887 2024-07-06 17:27:40+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10791 2024-07-09 10:22:28+00:00| published-proof-of-concept|...
CVE-2024-21514
creationtimestamp| type| source ---|---|--- 2024-06-23 03:13:00+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7745 2024-06-25 01:53:58+00:00| published-proof-of-concept| Telegram/1R4TDqFZ4Kk2cvU-Q0KFcUmFIIGZm1AR7rtDO8Lr1H9Bg...
CVE-2024-36416
creationtimestamp| type| source ---|---|--- 2024-06-12 06:33:48+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7618...
Exploit for Improper Initialization in Linux Linux_Kernel
!Dirty Pipehttps://miro.medium.com/v2/resize:fit:1400/1G1ov2...
EvilSlackbot - A Slack Bot Phishing Framework For Red Teaming Exercises
EvilSlackbot A Slack Attack Framework for conducting Red Team and phishing exercises within Slack workspaces. Disclaimer This tool is intended for Security Professionals only. Do not use this tool against any Slack workspace without explicit permission to test. Use at your own risk. Background...
CVE-2024-34220
creationtimestamp| type| source ---|---|--- 2024-05-11 07:42:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7271...
CVE-2024-26517
creationtimestamp| type| source ---|---|--- 2024-05-08 20:34:28+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7251...
Bypassing MFA on Microsoft Azure Entra ID
TL;DR Even though MFA is effective it is one security control amongst many Even if MFA is in use, check its configuration Consider unexpected patterns of use, such as people logging in from Linux or macOS Make sure you log and can react to out-of-band behaviour Introduction On a recent Red Team...
Network Threats: A Step-by-Step Attack Demonstration
Follow this real-life network attack simulation, covering 6 steps from Initial Access to Data Exfiltration. See how attackers remain undetected with the simplest tools and why you need multiple choke points in your defense strategy. Surprisingly, most network attacks are not exceptionally...
CVE-2024-31233
creationtimestamp| type| source ---|---|--- 2024-04-13 05:31:40+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7035...
CVE-2024-29278
creationtimestamp| type| source ---|---|--- 2024-04-11 12:08:59+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6877...
How Red Team Exercises Increases Your Cyber Health
Delve into the world of red team exercises, their vital role in enhancing organizational security through simulated cyberattacks, including tactics like phishing and lateral movement within networks, and understand the need for regular testing and improvement to counter evolving threats effective...
CVE-2024-27476
creationtimestamp| type| source ---|---|--- 2024-04-05 03:02:42+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6945...
CVE-2024-2865
creationtimestamp| type| source ---|---|--- 2024-03-26 09:32:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6857 2024-03-26 09:32:09+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6858...
CVE-2024-29197
creationtimestamp| type| source ---|---|--- 2024-03-25 11:55:39+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6849...
redteam-research
Collection of PoC and offensive techniques used by the BlackArrow Red Team...
CVE-2024-2065622
creationtimestamp| type| source ---|---|--- 2024-02-19 09:55:20+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6628...
PurpleKeep - Providing Azure Pipelines To Create An Infrastructure And Run Atomic Tests
With the rapidly increasing variety of attack techniques and a simultaneous rise in the number of detection rules offered by EDRs Endpoint Detection and Response and custom-created ones, the need for constant functional testing of detection rules has become evident. However, manually re-running...