moonwalk

moonwalk Cover your tracks during Linux Exploitation / Penetration Testing by leaving zero traces on system logs and filesystem timestamps. 📖 Table of Contents Introduction Features Installation Usage Contribution License ℹ️ Introduction moonwalk is a 400 KB single-binary executable that can clear...

eternal_check

Eternal Check 2.0 Eternal Check verifies if an ip is vulnerable to the smb vulnerabilities Eternal Blue Eternal Romance Eternal champion Eternal synergy Erraticgopher SMB v1 Exploit Windows XP & Server 2003 Eagerlever SMB v1 Exploit Windows XP & 2000 Screenshots Added in 2.0 Architouch uses port...

cve-2025-24054-lab

CVE-2025-24054 — 탐지 및 완화 실습실 CVE-2025-24054 에 대한 방어 보안 실습실의 프로젝트 로그입니다. 이는 Windows NT LAN 관리자NTLM 해시 노출 스푸핑 취약점으로, 영향을 받는 시스템을 단기간에 패치할 수 없다 는 가정 하에 작성되었습니다. 블루팀 교육 프로젝트머독 대학교 ICT279. 악용 기술은 공개적으로 문서화되어 있으며Check Point, CISA KEV, 원본 기여는 탐지 및 완화 방법론입니다. 이 저장소에는 실제 자격 증명이나 VM 자격 증명 시트가 저장되어 있지 않습니다...

http-protocol-exfil

http-protocol-exfil Use the HTTP protocol version to send a file bit by bit "HTTP/1.0" is a 0 and "HTTP/1.1" is a 1. It uses GET requests so the Blue Team would only see the requests to your IP address. However, it takes a long time to send bigger files, for example it needs 1 hour to send 200 KB...

CyberDefense-Lab

Laboratoire de cybersécurité : Infrastructure Blue Team et défense réseau Ce projet de laboratoire démontre la création d'une infrastructure « Blue Team » intégrée, axée sur la sécurité réseau centralisée, les systèmes de détection/prévention d'intrusion IDS/IPS et la gestion des informations et...

BTPS-SecPack

Le Paquet de Sécurité PowerShell de l'Équipe Bleue Utilisation de Microsoft Teams pour les alertes au lieu de l'email Si vous souhaitez utiliser Microsoft Teams pour envoyer des alertes au lieu d'utiliser l'email, vous voudrez charger la branche microsoft-teams de ce dépôt, qui contient les...

trajan

Trajan: CI/CD Security Scanner Trajan scans CI/CD pipelines for security vulnerabilities that attackers use to compromise software supply chains. It supports GitHub Actions, GitLab CI, Azure DevOps, Jenkins, and JFrog. What it does Trajan parses workflow YAML files, builds dependency graphs, runs...

CVE-2026-8173

creationtimestamp| type| source ---|---|--- 2026-08-24 08:23:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ge35ai4kaparv...

cypherhound

CypherHound A Python3 terminal application that contains Neo4j cyphers for BloodHound data sets with a script to automate importing them into BloodHound CE. Output Samples Terminal HTML Report HTML Report continued Why? BloodHound is a staple tool for every penetration tester. However, there are...

dmz-security-monitoring-hardening

Surveillance et durcissement de la sécurité de la DMZ CY376 : Surveillance, sécurité et audit réseau — Projet de fin de semestre Blue Team | Université des Mines et de la Technologie, Tarkwa Auteur : Kennedy Kumi Holomah Numéro d'index : FCM.41.018.148.23 Numéro d'étudiant : 9013004623 Vue...

CVE-2024-4577-rayng

CVE-2024-4577 - Лаборатория обнаружения внедрения аргументов PHP CGI Полная лаборатория для разработки систем обнаружения для CVE-2024-4577 внедрение аргументов PHP CGI. Включает готовые Vagrant-боксы, правила Wazuh SIEM и инструменты эксплуатации для обучения Blue Team. Что входит Windows Server...

apache-web-log-analysis-lab

مختبر تحليل سجلات ويب أباتشي مختبر الفريق الأزرق يركز على تحليل سجلات خادم Apache HTTP لاكتشاف نشاط المسح الويب، تعداد الدلائل، ومحاولات اجتياز المسار. الهدف تثبيت وكشف خادم ويب Apache في بيئة مختبرية معزولة، محاكاة المسح الويب الآلي باستخدام أدوات قياسية في الصناعة، وتحليل السجلات المُنشأة من...

thm-blue-writeup

TryHackMe — Blue | Этап 1: Разведка с помощью Nmap Курс: Cyber Security 101 | Комната: Blue | Инструмент: Nmap Контекст Комната Blue в первую очередь предназначена для использования Metasploit. Однако первое упражнение фокусируется на разведке — выявлении открытых портов и уязвимостей в цели до...

Pentest-Collaboration-Framework

Pentest Collaboration Framework Pentest Collaboration Framework - an opensource, cross-platform and portable toolkit for automating routine processes when carrying out various works for testing! Explore the docs » ‼️ Important Links...

awesome-cybersecurity-blueteam

Awesome Cybersecurity Blue Team Коллекция замечательных ресурсов, инструментов и других полезных вещей для синих команд в сфере кибербезопасности. Синие команды кибербезопасности — это группы людей, которые выявляют недостатки безопасности в информационных технологических системах, проверяют...

PENTEST-LAB

PENTEST-LAB Une application vulnérable moderne et un cyber range pour apprendre la sécurité Web, API, Cloud, IA et Blue Team grâce à des chaînes d'attaque pratiques. root@kitploit: ╔═══════════════════════════════════════════════════════════════╗ ║ ██████╗ ███████╗███╗...

cybersecurity-interview-questions

Questions d'entretien en cybersécurité Une collection gratuite et open-source pour Red Team, Blue Team, sécurité web, réponse aux incidents et plus encore...

scoringengine

Scoring Engine Scoring Engine is an open-source platform for running Red/White/Blue team cybersecurity competitions. It automates service checks each round and provides a web-based scoreboard and configuration interface. Features Automated scheduling and execution of service checks Distributed...

AD-description-password-finder

Détecteur de mots de passe dans la description AD Le but de cet outil est de vérifier si des mots de passe sont stockés en clair dans la description des comptes Active Directory. Les prérequis sont : avoir une copie du fichier ntds.dit et de la ruche SYSTEM Si vous n'avez pas Python, vous pouvez...

Pokemon-Shellcode-Loader

포켓몬 셸코드 로더 하루 종일 hex만 보다가 '\x41'을 꽂아넣는 게 지겹나요? 차라리 Lugia/Charmander를 보고 싶나요? 해결책을 가져왔습니다. @Checkymander가 포켓몬 이름으로 셸코드 로더를 만드는 트윗을 올렸습니다. 블루 팀을 골탕 먹이기에 아주 재미있는 프로젝트인데, POC가 없었습니다! 적어도 제가 마지막으로 확인했을 때는요 참고 1 업데이트된 코드는 제 GitHub에 있습니다: https://github.com/Techryptic/Pokemon-Shellcode-Loader 참고 2...