Esta Lista ya no se actualiza.

Awesome Red Teaming

Lista de recursos increíbles de Red Team / Red Teaming

Esta lista es para cualquiera que desee aprender sobre Red Teaming pero no tenga un punto de partida.

De todos modos, es un recurso vivo y se actualizará regularmente con las últimas Tácticas y Técnicas Adversarias basadas en Mitre ATT&CK

Puedes ayudar enviando Pull Requests para agregar más información.

Tabla de Contenidos

• Acceso Inicial
• Ejecución
• Persistencia
• Escalada de Privilegios
• Evasión de Defensas
• Acceso a Credenciales
• Descubrimiento
• Movimiento Lateral
• Recolección
• Exfiltración
• Comando y Control
• Hacking de Dispositivos Embeebidos y Periféricos
• Varios
• Gadgets RedTeam
• Ebooks
• Capacitación
• Certificación

↑ Acceso Inicial

• The Hitchhiker’s Guide To Initial Access
• How To: Empire’s Cross Platform Office Macro
• Phishing with PowerPoint
• PHISHING WITH EMPIRE
• Bash Bunny
• OWASP Presentation of Social Engineering - OWASP
• USB Drop Attacks: The Danger of “Lost And Found” Thumb Drives
• Weaponizing data science for social engineering: Automated E2E spear phishing on Twitter - Defcon 24
• Cobalt Strike - Spear Phishing documentation
• Cobalt Strike Blog - What's the go-to phishing technique or exploit?
• Spear phishing with Cobalt Strike - Raphael Mudge
• EMAIL RECONNAISSANCE AND PHISHING TEMPLATE GENERATION MADE SIMPLE
• Phishing for access
• Excel macros with PowerShell
• PowerPoint and Custom Actions
• Macro-less Code Exec in MSWord
• Multi-Platform Macro Phishing Payloads
• Abusing Microsoft Word Features for Phishing: “subDoc”
• Phishing Against Protected View
• POWERSHELL EMPIRE STAGERS 1: PHISHING WITH AN OFFICE MACRO AND EVADING AVS
• The PlugBot: Hardware Botnet Research Project
• Luckystrike: An Evil Office Document Generator
• The Absurdly Underestimated Dangers of CSV Injection
• Macroless DOC malware that avoids detection with Yara rule
• Phishing between the app whitelists
• Executing Metasploit & Empire Payloads from MS Office Document Properties (part 1 of 2)
• Executing Metasploit & Empire Payloads from MS Office Document Properties (part 2 of 2)
• Social Engineer Portal
• 7 Best social Engineering attack
• Using Social Engineering Tactics For Big Data Espionage - RSA Conference Europe 2012
• USING THE DDE ATTACK WITH POWERSHELL EMPIRE
• Phishing on Twitter - POT
• Microsoft Office – NTLM Hashes via Frameset
• Defense-In-Depth write-up
• Spear Phishing 101

↑ Ejecución

• Research on CMSTP.exe,
• Windows oneliners to download remote payload and execute arbitrary code
• Executing Commands and Bypassing AppLocker with PowerShell Diagnostic Scripts
• WSH Injection: A Case Study
• Gscript Dropper