adversary-emulation

There are 20 repositories under adversary-emulation topic.

monkey
guardicore / monkey
Infection Monkey - An open-source adversary emulation platform
penetration-testing security-tools security-automation infection-monkey adversary-emulation
Language:Python 6485
caldera
mitre / caldera
Automated Adversary Emulation Platform
adversary-emulation caldera security-automation red-team mitre mitre-attack security-testing mitre-corporation cybersecurity hacking
Language:Python 5171
DataDog / stratus-red-team
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
aws adversary-emulation purple-team mitre-attack cloud-security cloud-native-security detection-engineering threat-detection security aws-security azure-security kubernetes-security gcp-security
Language:Go 1620
center-for-threat-informed-defense / adversary_emulation_library
An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
ctid cybersecurity threat-informed-defense mitre-attack red-team cyber-threat-intelligence adversary-emulation adversary-emulation-plans
Language:C 1539
nshalabi / ATTACK-Tools
Utilities for MITRE™ ATT&CK
mitre-attack mitre adversary-emulation redteaming redteam
Language:HTML 995
DataDog / KubeHound
Kubernetes Attack Graph
adversary-emulation attack-graph attack-paths cloud-native-security exploit kubernetes kubernetes-security mitre-attack purple-team red-team security-audit security-automation security-tools
Language:Go 630
ch33r10 / EnterprisePurpleTeaming
Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study by Xena Olsen.
adversary adversary-emulation adversary-simulation adversaryemulation purpleteam purple-team red-team redteam
621
vectra-ai-research / MAAD-AF
MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).
adversary-emulation microsoft microsoft-azure-security powershell security cloud-security mitre red-team security-testing azuread cloud-administration microsoft365 identity-access-management microsoft-graph ttp entra-id
Language:PowerShell 331
hades
f1zm0 / hades
Go shellcode loader that combines multiple evasion techniques
av-evasion edr-evasion golang pentesting red-teaming ntapi ntdll syscalls evasion adversary-emulation offensive-security
Language:Go 318
f1zm0 / acheron
indirect syscalls for AV/EDR evasion in Go assembly
evasion adversary-emulation av-evasion edr-bypass edr-evasion malware-research offensive-security red-team red-teaming assembly go golang
Language:Assembly 283
password-reset / Invoke-Apex
A PowerShell-based toolkit and framework consisting of a collection of techniques and tradecraft for use in red team, post-exploitation, adversary simulation, or other offensive security tasks.
adversary-emulation mitre-attack offensive-security pentesting powershell redteam
Language:PowerShell 182
mitre / caldera-ot
MITRE Caldera™ for OT Plugins & Capabilities
adversary-emulation bacnet caldera cybersecurity dnp3 mitre mitre-attack mitre-corporation modbus operational-technology ot profinet
174
center-for-threat-informed-defense / caldera_pathfinder
Pathfinder is a plugin for mapping network vulnerabilities, scanned by CALDERA or imported by a supported network scanner, and translating those scans into adversaries for network traversal.
cybersecurity threat-informed-defense red-team ctid adversary-emulation caldera
Language:Python 118
jwillyamz / ezEmu
See adversary, do adversary: Simple execution of commands for defensive tuning/research (now with more ELF on the shelf)
purpleteam adversary-emulation security-testing linux-security mitre-attack
Language:C# 102
maddev-engenuity / AdversaryEmulation
MAD ATT&CK Defender: ATT&CK Adversary Emulation Repository
adversary-emulation mitre-attack labs training-materials
Language:Python 99
Sam0x90 / CTI
Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on
adversary-emulation adversary-simulation cti purpleteam threat-intelligence
Language:PowerShell 72
MythicStack / Python-Security-Tool-Database
Solid Python toolkit for those in the security industry. Some by me, most by smarter people.
hacking security-tools adversary-emulation adversary-simulation awesome-list cybersecurity information-gathering infosec osint penetration-testing-tools python
50
Ixve / Red-Team-Tools
Repo containing cracked red teaming tools.
adversary adversary-emulation adversary-simulation backdoor backdoors c2 command-and-control penetration-testing penetration-testing-tools pentest pentest-tool pentest-tools pentesting rat red-team red-team-tools red-teaming red-teaming-tools remote-control trojan
Language:Batchfile 49
adversarial-threat-modelling
ssnkhan / adversarial-threat-modelling
Supporting material for my presentation "Adversarial Threat Modelling — A Practical Approach to Purple Teaming in the Enterprise"
adversary-emulation adversary-simulation blueteam cti mitre-attack purpleteam redteam threat-intelligence
Language:Shell 49
manticore-cli
Manticore-Platform / manticore-cli
Manticore Adversary Emulation Cli
adversary-emulation redteam redteam-tools redteamer
Language:Go 46
pygrum / monarch
Monarch - The Adversary Emulation Toolkit
c2 command-and-control golang red-team-engagement red-teaming security-tools adversary-emulation implant red-team
Language:Go 43
VVX7 / nicodemus
A cross-platform Nim implant for Prelude Operator
nim pneuma adversary-emulation red-team implant operator redteam rat ost
Language:Nim 30
mitre / emu
This CALDERA Plugin converts Adversary Emulation Plans from the Center for Threat Informed Defense
adversary-emulation caldera-plugin caldera
Language:Python 26
attackevals / website
ATT&CK Evaluations Website
cybersecurity cyber-threat-intelligence cti mitre-engenuity mitre-attack cyber-security adversary-emulation mitre-corporation
Language:HTML 22
TartarusLabs / Coyote
Coyote is a standalone C# post-exploitation implant for maintaining access to compromised Windows infrastructure during red team engagements using DNS tunneling.
implant penetration-testing red-team red-teaming security post-exploitation c2 command-and-control adversary-emulation covert-channel backdoor dns-tunneling
Language:C# 20
AutomoxSecurity / iShelly
A tool to generate macOS initial access vectors using Prelude Operator payloads
macos prelude purpleteam adversary-emulation adversary-simulation operator initial-access
Language:Python 17
HeadHunter
shellph1sh / HeadHunter
HeadHunter Command and Control (C2) Framework
c ethical-hacking-tools socket-programming handler payload payload-generator c2 command-and-control xor-encryption adversary-emulation penetration-testing-tools
Language:C 14
TartarusLabs / Expeditus
Expeditus is a loader that executes shellcode on a target Windows system. It combines several offensive techniques in order to attempt to do this with some level of stealth.
adversary-emulation amsi-bypass amsi-evasion code-injection dropper penetration-testing process-injection red-team red-teaming security shellcode-injection shellcode-loader
Language:C# 11
Manticore-Platform / public-threats
Manticore's Public Threats Repository
threat-sharing threat adversary-emulation
10
mehgrmlhmpf / AttackGraphGeneratorMasterThesis
This work shows the viability of automatically generated attack graphs that are used for adversary behavior execution in industrial control system environments. This viability is evaluated and confirmed with expert interviews about results of this thesis, generated attack graphs and an implemented prototype.
adversary-emulation attack-graphs mitre-attack ics-security ics
10
hckops / hckctl
The Security Automation Toolkit
devsecops hacking pentesting adversary-emulation security-automation adversarial-attacks mitre-attack pwnbox bugbounty
Language:Go 6
Manticore-Platform / public-scenarios
Manticore's Public Threat Scenarios
redteam scenarios adversary-emulation
5
EmilioPanti / worm
A CALDERA plugin
adversary-emulation caldera mitre red-team mitre-attack security-testing worm lateral-movement
Language:JavaScript 3
hideckies / hermit
A command and control framework.
adversary-emulation c2 command-and-control redteam
Language:C++ 3
VVX7 / OperatorAPI
An REST API client library for Prelude Operator.
adversary-emulation adversary-simulation nim nim-lang operator
Language:Nim 3
mitre / iec61850
Caldera for OT Plugin
adversary-emulation caldera iec61850 mitre operational-technology
Language:C 2