Red Teaming Toolkit başlıklı teknik kaynağın içeriği, sızma testi & kırmızı takım alanında pratik bilgiler sunmaktadır. Aşağıda belgeden hareketle hazırlanan teknik inceleme yer almaktadır.
Genel Bakış
Red T eaming T oolkit This repository contains cutting-edge open-source security tools (OST) that will help you during adversary simulation and as information intended for threat hunter can make detection and prevention control easier....
Temel Kavramlar
The list of tools below that could be potentially misused by threat actors such as APT and Human-Operated Ransomware (HumOR)....
Teknik Uygulama
If you want to contribute to this list send me a pull request....
Örnek Senaryo
Ta b l e o f C o n t e n t s Reconnaissance Initial Access Delivery Situational Awareness Credential Dumping Privilege Escalation Defense Evasion Persistence Lateral Movement Exfiltration Miscellaneous Reconnaissance Name Description URL RustScan The Modern Port Scanner....
Dikkat Edilmesi Gerekenler
Find ports quickly (3 seconds at its fastest)....
Özet
Run scripts through our scripting engine (Python, Lua, Shell supported)....
Bölüm 7
https://tinyurl.com/yzm7jdhz Amass In-depth Attack Surface Mapping and Asset Discovery https://tinyurl.com/y5ndjozr gitleaks Gitleaks is a SAST tool for detecting hardcoded secrets like passwords, api keys, and tokens in git repos....
Bölüm 8
https://tinyurl.com/y3bwm7nn S3Scanner Scan for open S3 buckets and dump the contents https://tinyurl.com/y5snjrqp cloud_enum Multi-cloud OSINT tool....
Bu makale "Red Teaming Toolkit" kaynağından üretilmiştir. Tam metin ve orijinal doküman /root/pdf klasöründe mevcuttur. İçerik eğitim amaçlıdır.