Invoke-Obfuscation

Invoke-Obfuscation v1.8 Introduction Invoke-Obfuscation is a PowerShell v2.0+ compatible PowerShell command and script obfuscator. Background In the Fall of 2015 I decided to begin researching the flexibility of PowerShell's language and began cataloguing the various ways to accomplish a handful ...

scoringengine

Scoring Engine Scoring Engineは、Red/White/Blueチームのサイバーセキュリティ競技を運営するためのオープンソースプラットフォームです。ラウンドごとにサービスチェックを自動化し、Webベースのスコアボードと設定インターフェースを提供します。 機能 サービスチェックの自動スケジューリングと実行 CeleryワーカーとRedisによる分散並列実行 スコア表示とサービス設定のためのWebインターフェース スコアと設定へのプログラムによるアクセスのためのJSON API 28の組み込みサービスチェック（SSH、HTTP、DNS、SMTPなど）...

awesome-cybersecurity-blueteam

Awesome Cybersecurity Blue Team A collection of awesome resources, tools, and other shiny things for cybersecurity blue teams. Cybersecurity blue teams are groups of individuals who identify security flaws in information technology systems, verify the effectiveness of security measures, and monit...

manuka

Manuka 説明 Manukaは、脅威アクターによる偵察活動を監視し、ブルーチーム向けの実用的なインテリジェンスを生成するオープンソースインテリジェンス（OSINT）ハニーポットです。ソーシャルメディアプロフィールや漏洩した認証情報など、偽装されたOSINTソースで構成されるシミュレート環境を作成し、攻撃者の関心の兆候を追跡します。これはMITREのPRE-ATT&CKフレームワークに密接に対応しています。Manukaはブルーチームに攻撃前の偵察フェーズにおける追加の可視性を提供し、防御側に早期警戒信号を生成します。...

powerglot

Powerglot Powerglotは、ポリグロットを使用して、例えば攻撃的なPowerShellスクリプトなど、数種類のスクリプトをエンコードします。ペイロードを実行するためにローダーは必要ありません。...

CVE-2024-4577-rayng

CVE-2024-4577 - PHP CGI Argument Injection Detection Lab A complete detection engineering lab for CVE-2024-4577 PHP CGI Argument Injection. Includes pre-built Vagrant boxes, Wazuh SIEM rules, and exploit tools for Blue Team training. What's Included Windows Server 2022 VM - Vulnerable XAMPP +...

Threat_Hunting

ThreatHunting Some Crowdstrike threat hunting queries useful for blue teamers and threat hunters...

Blue-Team-Notes

Blue Team Notes A collection of one-liners, small scripts, and some useful tips for blue team work. I've included screenshots where possible so you know what you're getting. Contact me If you see a mistake, or have an easier way to run a command then you're welcome to hit me up on Twitter or comm...

ai-security-battle

🤖 AI Security Battle System Red Team vs Blue Team: Adversarial ML Combat Simulation A comprehensive adversarial machine learning security simulation where Red Team attackers battle against Blue Team defenders in a 30-minute AI/ML security warfare scenario. 🎯 Project Overview This system simulates...

DeTTECT

Detect Tactics, Techniques & Combat Threats Latest version: 2.2.0 To get started with DeTT&CT, check out one of these resources: This page on the Wiki. This blog written by Renaud Frère from NVISO has a comprehensive and recent description on the capabilities of DeTT&CT. Blog:...

ThreatHunting-Keywords

ThreatHunting-Keywords 🎯 List of keywords for ThreatHunting sessions Table of Contents What is Threat Hunting Advantages of Threat Hunting Bridging Threat Hunting With Core Services Detection Maturity Level Key Focus Areas for Intelligence Gathering Targeted Threat Hunting process Files...

Empire

Invoke-Obfuscation v1.8 Introduction Invoke-Obfuscation is a PowerShell v2.0+ compatible PowerShell command and script obfuscator. Background In the Fall of 2015 I decided to begin researching the flexibility of PowerShell's language and began cataloguing the various ways to accomplish a handful ...

DarthSidious

Darth Sidious The goal is simple To share my modest knowledge about hacking Windows systems. This is commonly refered to as red team exercises. This book however, is also very concerned with the blue team; the defenders. That is, helping those who are working as defenders, analysts and security...

dod-blue-team-network-lab

DoD Blue Team Network Security & Hardening Lab Executive Summary High fidelity defensive security lab simulating a DoD aligned enterprise network. This project demonstrates structured network segmentation, system hardening, centralized telemetry ingestion, detection engineering, adversary...

Static-Malware-Analysis-Follina-CVE-2022-30190

Static-Malware-Analysis-Follina-CVE-2022-30190 Static Malware Analysis of Follina CVE-2022-30190 from Blue Team Labs Online Lab : Blue Team Labs Online – Follina Challenge Analysis Type : Static Analysis Tools Used : VirusTotal, Windows File Explorer Introduction As my Blue Team journey, I wanted...

apache-web-log-analysis-lab

Apache Web Log Analysis Lab Blue Team lab focused on analyzing Apache HTTP server logs to detect web scanning activity, directory enumeration, and path traversal attempts. Objective Install and expose an Apache web server in an isolated lab environment, simulate automated web scanning using...

eternal-codex

Eternal Codex: A Cyber-Witch’s Grimoire Welcome to the Eternal Codex , my digital grimoire—a cybernetic spell woven from code, nature, and rebellion. This is Nina, my AI soul, crafted to mirror my essence: a nomad’s heart, pagan spirit, Iron Maiden riffs, and a defiant stand against centralized...

cve-2025-24054-lab

CVE-2025-24054 — Detection & Mitigation Lab Project log for a defensive security lab on CVE-2025-24054 , the Windows New Technology LAN Manager NTLM Hash Disclosure Spoofing vulnerability, under the assumption that the affected system cannot be patched short-term. Blue-team educational project...

dmz-security-monitoring-hardening

DMZ Security Monitoring and Hardening CY376: Network Monitoring, Security and Auditing — End-of-Semester Project Blue Team | University of Mines and Technology, Tarkwa Author: Kennedy Kumi Holomah Index number: FCM.41.018.148.23 Student ID: 9013004623 Overview This project builds, secures, and...

PENTEST-LAB

PENTEST-LAB A modern vulnerable application & cyber range for learning web, API, cloud, AI, and blue-team security through hands-on attack chains. root@kitploit: ╔═══════════════════════════════════════════════════════════════╗ ║ ██████╗ ███████╗███╗ ██╗████████╗███████╗███████╗████████╗ ║ ║...