adversary-emulation

There are 25 repositories under adversary-emulation topic.

monkey
guardicore / monkey
Infection Monkey - An open-source adversary emulation platform
adversary-emulation infection-monkey penetration-testing security-automation security-tools
Language:Python 6751
caldera
mitre / caldera
Automated Adversary Emulation Platform
adversary-emulation caldera cybersecurity hacking mitre mitre-attack mitre-corporation red-team security-automation security-testing
Language:Python 5932
DataDog / stratus-red-team
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
aws adversary-emulation purple-team mitre-attack cloud-security cloud-native-security detection-engineering threat-detection security aws-security azure-security kubernetes-security gcp-security
Language:Go 1944
center-for-threat-informed-defense / adversary_emulation_library
An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
adversary-emulation adversary-emulation-plans ctid cyber-threat-intelligence cybersecurity mitre-attack red-team threat-informed-defense
Language:C 1828
nshalabi / ATTACK-Tools
Utilities for MITRE™ ATT&CK
mitre-attack mitre adversary-emulation redteaming redteam
Language:HTML 1020
DataDog / KubeHound
Tool for building Kubernetes attack paths
adversary-emulation attack-graph attack-paths cloud-native-security exploit kubernetes kubernetes-security mitre-attack purple-team red-team security-audit security-automation security-tools
Language:Go 827
ch33r10 / EnterprisePurpleTeaming
Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study by Xena Olsen.
adversary adversary-emulation adversary-simulation adversaryemulation purple-team purpleteam red-team redteam
643
vectra-ai-research / MAAD-AF
MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).
adversary-emulation azuread cloud-administration cloud-security entra-id identity-access-management microsoft microsoft-azure-security microsoft-graph microsoft365 mitre powershell red-team security security-testing ttp
Language:PowerShell 371
hades
f1zm0 / hades
Go shellcode loader that combines multiple evasion techniques
adversary-emulation av-evasion edr-evasion evasion golang ntapi ntdll offensive-security pentesting red-teaming syscalls
Language:Go 362
f1zm0 / acheron
indirect syscalls for AV/EDR evasion in Go assembly
evasion adversary-emulation av-evasion edr-bypass edr-evasion malware-research offensive-security red-team red-teaming assembly go golang
Language:Assembly 326
mitre / caldera-ot
MITRE Caldera™ for OT Plugins & Capabilities
adversary-emulation bacnet caldera cybersecurity dnp3 mitre mitre-attack mitre-corporation modbus operational-technology ot profinet
205
password-reset / Invoke-Apex
A PowerShell-based toolkit and framework consisting of a collection of techniques and tradecraft for use in red team, post-exploitation, adversary simulation, or other offensive security tasks.
redteam pentesting mitre-attack offensive-security powershell adversary-emulation
Language:PowerShell 184
Ixve / Red-Team-Tools
Repo containing cracked red teaming tools.
adversary adversary-emulation adversary-simulation backdoor backdoors c2 command-and-control penetration-testing penetration-testing-tools pentest pentest-tool pentest-tools pentesting rat red-team red-team-tools red-teaming red-teaming-tools remote-control trojan
Language:Batchfile 152
center-for-threat-informed-defense / caldera_pathfinder
Pathfinder is a plugin for mapping network vulnerabilities, scanned by CALDERA or imported by a supported network scanner, and translating those scans into adversaries for network traversal.
cybersecurity threat-informed-defense red-team ctid adversary-emulation caldera
Language:Python 126
maddev-engenuity / AdversaryEmulation
MAD ATT&CK Defender: ATT&CK Adversary Emulation Repository
adversary-emulation labs mitre-attack training-materials
Language:Python 112
jwillyamz / ezEmu
See adversary, do adversary: Simple execution of commands for defensive tuning/research (now with more ELF on the shelf)
purpleteam adversary-emulation security-testing linux-security mitre-attack
Language:C# 102
NVISOsecurity / cyber-security-llm-agents
A collection of agents that use Large Language Models (LLMs) to perform tasks common on our day to day jobs in cyber security.
adversary-emulation ai caldera cybersecurity infosec llm
Language:Jupyter Notebook 90
Sam0x90 / CTI
Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on
adversary-emulation adversary-simulation cti purpleteam threat-intelligence
Language:PowerShell 81
adversarial-threat-modelling
ssnkhan / adversarial-threat-modelling
Supporting materials for my "Intelligence-Led Adversarial Threat Modelling with VECTR" workshop
adversary-emulation adversary-simulation blueteam cbest cti dora mitre-attack purpleteam redteam threat-intelligence tiber-eu
Language:Jupyter Notebook 67
pygrum / monarch
Monarch - The Adversary Emulation Toolkit
c2 command-and-control golang red-team-engagement red-teaming security-tools adversary-emulation implant red-team
Language:Go 60
attackevals / ael
ATT&CK Evaluations Library
adversary-emulation attack attack-evaluations cybersecurity mitre-attack mitre-engenuity purple-team red-team
Language:C 59
MythicStack / Python-Security-Tool-Database
Solid Python toolkit for those in the security industry. Some by me, most by smarter people.
hacking security-tools adversary-emulation adversary-simulation awesome-list cybersecurity information-gathering infosec osint penetration-testing-tools python
57
hideckies / hermit
A command and control framework.
adversary-emulation c2 command-and-control redteam implant
Language:C++ 48
manticore-cli
Manticore-Platform / manticore-cli
Manticore Adversary Emulation Cli
adversary-emulation redteam redteam-tools redteamer
Language:Go 47
VVX7 / nicodemus
A cross-platform Nim implant for Prelude Operator
nim pneuma adversary-emulation red-team implant operator redteam rat ost
Language:Nim 32
mitre / emu
This CALDERA Plugin converts Adversary Emulation Plans from the Center for Threat Informed Defense
adversary-emulation caldera caldera-plugin
Language:Python 30
TartarusLabs / Coyote
Coyote is a standalone C# post-exploitation implant for maintaining access to compromised Windows infrastructure during red team engagements using DNS tunneling.
adversary-emulation backdoor c2 command-and-control covert-channel dns-tunneling implant penetration-testing post-exploitation red-team red-teaming security
Language:C# 19
AutomoxSecurity / iShelly
A tool to generate macOS initial access vectors using Prelude Operator payloads
macos prelude purpleteam adversary-emulation adversary-simulation operator initial-access
Language:Python 17
center-for-threat-informed-defense / m3tid
The Measure, Maximize, and Mature Threat-Informed Defense (M3TID) project defines what Threat-Informed Defense (TID) is and the key activities associated with its practice.
adversary-emulation ctid cyber-threat-intelligence cybersecurity detection-engineering mitre-attack threat-informed-defense
Language:Makefile 15
mehgrmlhmpf / AttackGraphGeneratorMasterThesis
This work shows the viability of automatically generated attack graphs that are used for adversary behavior execution in industrial control system environments. This viability is evaluated and confirmed with expert interviews about results of this thesis, generated attack graphs and an implemented prototype.
adversary-emulation attack-graphs mitre-attack ics-security ics
12
TartarusLabs / Expeditus
Expeditus is a loader that executes shellcode on a target Windows system. It combines several offensive techniques in order to attempt to do this with some level of stealth.
adversary-emulation amsi-bypass amsi-evasion code-injection dropper penetration-testing process-injection red-team red-teaming security shellcode-injection shellcode-loader
Language:C# 12
Manticore-Platform / public-threats
Manticore's Public Threats Repository
adversary-emulation threat threat-sharing
10
hckops / hckctl
The Security Automation Toolkit
devsecops hacking pentesting adversary-emulation security-automation adversarial-attacks mitre-attack pwnbox bugbounty
Language:Go 8
soheilsec / APT-28-Simulation
شبیه سازی حمله گروه هکرهای دولتی منتسب به روسیه APT 28
adversary-emulation adversary-simulation apt28 redteam
7
Manticore-Platform / public-scenarios
Manticore's Public Threat Scenarios
redteam scenarios adversary-emulation
6
smeukinou / QRGrabber
Sliver Extension to monitor target's screen and automatically grab QRCodes displayed during MFA enrollement
adversary-emulation c2 red-team sliver
Language:C++ 4

adversary-emulation

guardicore / monkey

mitre / caldera

DataDog / stratus-red-team

center-for-threat-informed-defense / adversary_emulation_library

nshalabi / ATTACK-Tools

DataDog / KubeHound

ch33r10 / EnterprisePurpleTeaming

vectra-ai-research / MAAD-AF

f1zm0 / hades

f1zm0 / acheron

mitre / caldera-ot

password-reset / Invoke-Apex

Ixve / Red-Team-Tools

center-for-threat-informed-defense / caldera_pathfinder

maddev-engenuity / AdversaryEmulation

jwillyamz / ezEmu

NVISOsecurity / cyber-security-llm-agents

Sam0x90 / CTI

ssnkhan / adversarial-threat-modelling

pygrum / monarch

attackevals / ael

MythicStack / Python-Security-Tool-Database

hideckies / hermit

Manticore-Platform / manticore-cli

VVX7 / nicodemus

mitre / emu

TartarusLabs / Coyote

AutomoxSecurity / iShelly

center-for-threat-informed-defense / m3tid

mehgrmlhmpf / AttackGraphGeneratorMasterThesis

TartarusLabs / Expeditus

Manticore-Platform / public-threats

hckops / hckctl

soheilsec / APT-28-Simulation

Manticore-Platform / public-scenarios

smeukinou / QRGrabber