derf

The DeRF DeRF Detection Replay Framework is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation of repeatable detection samples from a UI - without the need for End Users to install software, use the CLI or possess credentials in the target...

stratus-red-team

Stratus Red Team Stratus Red Team は、クラウド向けの「Atomic Red Team™」であり、オフェンシブな攻撃テクニックのエミュレーションをきめ細かく自己完結型で提供します。 発表ブログ記事: https://www.datadoghq.com/blog/cyber-attack-simulation-with-stratus-red-team/ https://blog.christophetd.fr/introducing-stratus-red-team-an-adversary-emulation-tool-for-the-cloud/ はじ...

redteam-research

レッドチーム研究 BlackArrow Red Team によって使用される PoC と攻撃手法のコレクション ライセンス このプロジェクトに含まれるすべてのコードは、MIT ライセンスの条件に基づいてライセンスされています。...

redteam-research

Collection of PoC and offensive techniques used by the BlackArrow Red Team...

redteam-research

Collection of PoC and offensive techniques used by the BlackArrow Red Team...

redteam-research

Red Team Research Collec...

Revoke-Obfuscation: PowerShell Obfuscation Detection Using Science

Many attackers continue to leverage PowerShell as a part of their malware ecosystem, mostly delivered and executed by malicious binaries and documents. Of malware that uses PowerShell, the most prevalent use is the garden-variety stager: an executable or document macro that launches PowerShell to...

Revoke-Obfuscation: PowerShell Obfuscation Detection Using Science

Many attackers continue to leverage PowerShell as a part of their malware ecosystem, mostly delivered and executed by malicious binaries and documents. Of malware that uses PowerShell, the most prevalent use is the garden-variety stager: an executable or document macro that launches PowerShell to...

Java deserialization vulnerability to execute commands echo to achieve and Exploit download-vulnerability warning-the black bar safety net

Mentioned some of the techniques, tools may with a certain offensive, only for safety learning and teaching purposes, the prohibition of illegal use! 0×0 0 Preface Some time ago java deserialization vulnerability fights uproar, from the beginning of foreign cattle one can execute OS commands...

Bugging the Bug Market

PUNTA CANA–The Microsoft bug bounty program, started last year as a way to encourage researchers to develop new offensive and defensive techniques, has been a success so far and the company is looking for new ways to expand it in the future. Katie Moussouris, the security strategist at Microsoft...

Microsoft to Pay First Bug Bounty for IE 11

Just a few weeks after announcing its first bug bounty programs, Microsoft is already set to pay out a reward to a researcher from Google who discovered a vulnerability in Internet Explorer 11. Microsoft officials say that they have several other qualifying entries for the IE 11 reward program...

How Offensive Research Drives Down the Cost of Attacks

CANCUN–The offensive security research community has evolved in the last decade or so from a relatively small and insular group inwardly focused, to a large and rather vocal group with a wide variety of motives, opinions and skill levels. But, to hear Brad Arkin of Adobe tell it, the huge amount ...