4 links
tagged with all of: security + red-team
Click any tag below to further narrow down your results
Links
MFTool is a specialized NTFS parser designed for red team operations, allowing direct access to the Master File Table without relying on Windows APIs. It enables users to search for files, retrieve locked or deleted content, and navigate NTFS structures stealthily, catering to the specific needs of security professionals. The tool also features commands for file retrieval, metadata display, and directory enumeration, though it has some limitations, including incomplete parsing of NTFS attributes and unsupported encrypted files.
The article discusses techniques for extracting credentials from Microsoft Deployment Toolkit (MDT) shares, highlighting the vulnerabilities that can be exploited by red teamers. It provides insights into the methodologies used to access sensitive information and emphasizes the importance of securing MDT configurations against potential threats.
MSIXBuilder is a powerful PowerShell tool designed for creating MSIX packages tailored for security testing, red team exercises, and detection validation. It offers features like zero-config dependency management, smart certificate generation, and real-time monitoring to facilitate both offensive and defensive security operations. With its intuitive GUI and one-click package creation, it streamlines the process for security professionals and researchers alike.
Wyrm is an open-source Red Team security testing framework written in Rust, designed for authorized security testing. Users are advised to change default credentials for security and to back up profiles before updating, as the project is under active development with planned updates and new features. It provides various functionalities, including encrypted communication and dynamic payload generation, while emphasizing legal and authorized use only.