Red-Team-Exercises - 红蓝攻防相关项目

项目说明

Red-Team-Exercises

Repository of my LinkedIn posts about Red Team Exercises

My LinkedIn:

Courses:

LinkedIn posts

Red Team Exercises #0 - Red Team De Download

Red Team Exercise #1 - How to improve my shellcode runner

Red Team Exercises #2 - What can't be missing from your nginx redirectors?

Red Team Exercises #3 - AMSI Bypass

Red Team Exercises #4 - Domain Controller Owned PT.1

Red Team Exercises #5 - Spear-Phishing Campaign 1

Red Team Exercises #6- ETW E

Red Team Exercises #7 - PPL Bypass

Red Team Exercises #8 - SmartScreen Bypass

Red Team Exercises #9 - Process Injection

Red Team Exercises #10 - Spear-Phishing PT.2

Red Team Exercises #11 - Physical Operations PT.1

Red Team Exercises #12 - Anti E

Red Team Exercises #13 - Windows API Hooking and DLL Injection

Red Team Exercises #14 - Direct and Indirect Syscall PT.1

Red Team Exercises #15 - Direct Syscall Lsass Dump

Red Team Exercises #16 - BYO PT.1

Red Team Exercises #17 - Acti Enumeration PT.1

Red Team Exercises #18 - C2 Redirector PT.1

Red Team Exercises #19 - Alternati or Undocumented Implementations of Windows API PT.1

Red Team Exercises #20 - EDR E using Hookchain Technique Created by Hélvio Júnior, SCMPA e SCWAP Leader, OSCE3, OSCP, eCXD

Red Team Exercises #21 - Havoc C2 Profile

Red Team Exercises #22 - MutationGate Technique EDR E by Ziyi Shen

Red Team Exercises #23 - Windows API Hashing

Red Team Exercises #24 - Powershell Unmanaged or Powershell w/o Powershell

Red Team Exercises #25 - UnhookingPatch by Saad AHLA

Red Team Exercises #26 - Syswhisper3 - (in)Direct Syscall Tool

Red Team Exercises #27 - Syscall Hook Detector

Red Team Exercises #28 - Mimikatz Cheatsheet Basic

Red Team Exercises #29 - HTML Smuggling Delivery

Red Team Exercises #30 - Creating a simple Dropper in C++ PT.1

Red Team Exercises #31 - Mo (A fun way to obfuscate, but perhaps not effecti days)

Red Team Exercises #32 - Donut Shellcode Generator PT.1

Red Team Exercises #33 - Shellcode Runner with Kill Switch / Panic Switch

Red Team Exercises #34 - Remote Thread Hijacking

Red Team Exercises #35 - Impacket Collection Tools for Exploitation AD

Red Team Exercises #36 - Persistence Techniques to Windows PT.1

Red Team Exercises #37 - Initial Access with LNK File

Red Team Exercises #38 - SliverC2 and Shellcode Runner with Rust

Red Team Exercises #39 - Get System Dri using Userland Program

Red Team Exercises #40 - Dylib Injection in MacOS

Red Team Exercises #41 - Create your Pipeline to Offensi PT.1 MAAS by Joff Thyer

Red Team Exercises #42 - Build your own C2 PT.1

Red Team Exercises #43 - BOF De PT.1

Red Team Exercises #44 - Initial Access with PT.1

Red Team Exercises #45 - Monitoring Techniques for Your Red Team Infrastructure PT.1

Red Team Exercises #46 - Shellcode Encryption using XOR PT.1

Red Team Exercises #47 - Research in Drivers Example PT.1

Red Team Exercises #48 - Pri Escalation PT.1 - Token Manipulation

Red Team Exercises #49 - Bypass DLP PT.1

Red Team Exercises #50 Fake reCaptcha Phishing

Red Team Exercises #51 - MCP (Model Context Protocol) in Offensi

Red Team Exercises #52 - Abusing Acti Certificate Services PT.1

Red Team Exercises #53 - Hidden Shellcode in Image using Imgpayload

Red Team Exercises #54 - Anti-debugging Techniques PT.1

Red Team Exercises #55 - Spear-Phishing with Modlishka PT.3

Red Team Exercises #56 - Spear-Phishing Opsec Techniques PT.1

Red Team Exercises #57 - Binary Padding and O Compress

Red Team Exercises #58 - Chrome Password Dump

Red Team Exercises #59 - Runtime IAT PT.1

Red Team Exercises #60: TypeLib Hijacking for Stealthy Windows Persistence

Red Team Exercises #61 - Shellcode Hiding with UUID Strings

Red Team Exercises #62 - Shellcode via IPv4 Address Con

Red Team Exercises #63 - WASM Smuggling

Red Team Exercises #64 - Kernel Callback Table Injection

Red Team Exercises #65 - EDR Unhooking DLL Mapping

Red Team Exercises #66 - Golden Certificate Attack (AD CS Persistence)

Red Team Exercises #67 - Data-Only Gadget Windows Kernel Exploitation PT.1

Red Team Exercises #68 - KslKatz: LSASS Dump

Red Team Exercises #69 - Domain Admin via CA exploiting ESC7

Red Team Exercises #70 - Using uncensored AI for AV/EDR e

-------------------------------------------------------------------

OSINT-Red-Team-Exercises

OSINT for Red Team Exercises - #1 Dorks Search using sitedorks Tool

OSINT for Red Team Exercises #2 - Credential Leaks: Exploring Targets with Compromised Data Intelligence PT.1

OSINT for Red Team Exercises #3 - Whois and Resolving Domains

OSINT for Red Team Exercises #4 - Deep/Dark Web Search PT.1

项目信息

开发语言：C++

Star 数：729

技术要点

该项目属于红蓝攻防方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕红蓝攻防相关项目展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。