adversary-emulation

There are 24 repositories under adversary-emulation topic.

monkey
guardicore / monkey
Infection Monkey - An open-source adversary emulation platform
adversary-emulation infection-monkey penetration-testing security-automation security-tools
Language:Python 6705
caldera
mitre / caldera
Automated Adversary Emulation Platform
adversary-emulation caldera cybersecurity hacking mitre mitre-attack mitre-corporation red-team security-automation security-testing
Language:Python 5737
DataDog / stratus-red-team
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
aws adversary-emulation purple-team mitre-attack cloud-security cloud-native-security detection-engineering threat-detection security aws-security azure-security kubernetes-security gcp-security
Language:Go 1868
center-for-threat-informed-defense / adversary_emulation_library
An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
adversary-emulation adversary-emulation-plans ctid cyber-threat-intelligence cybersecurity mitre-attack red-team threat-informed-defense
Language:C 1741
nshalabi / ATTACK-Tools
Utilities for MITRE™ ATT&CK
mitre-attack mitre adversary-emulation redteaming redteam
Language:HTML 1011
DataDog / KubeHound
Tool for building Kubernetes attack paths
adversary-emulation attack-graph attack-paths cloud-native-security exploit kubernetes kubernetes-security mitre-attack purple-team red-team security-audit security-automation security-tools
Language:Go 801
ch33r10 / EnterprisePurpleTeaming
Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study by Xena Olsen.
adversary adversary-emulation adversary-simulation adversaryemulation purple-team purpleteam red-team redteam
640
vectra-ai-research / MAAD-AF
MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).
adversary-emulation microsoft microsoft-azure-security powershell security cloud-security mitre red-team security-testing azuread cloud-administration microsoft365 identity-access-management microsoft-graph ttp entra-id
Language:PowerShell 363
hades
f1zm0 / hades
Go shellcode loader that combines multiple evasion techniques
adversary-emulation av-evasion edr-evasion evasion golang ntapi ntdll offensive-security pentesting red-teaming syscalls
Language:Go 356
f1zm0 / acheron
indirect syscalls for AV/EDR evasion in Go assembly
evasion adversary-emulation av-evasion edr-bypass edr-evasion malware-research offensive-security red-team red-teaming assembly go golang
Language:Assembly 312
mitre / caldera-ot
MITRE Caldera™ for OT Plugins & Capabilities
adversary-emulation bacnet caldera cybersecurity dnp3 mitre mitre-attack mitre-corporation modbus operational-technology ot profinet
200
password-reset / Invoke-Apex
A PowerShell-based toolkit and framework consisting of a collection of techniques and tradecraft for use in red team, post-exploitation, adversary simulation, or other offensive security tasks.
adversary-emulation mitre-attack offensive-security pentesting powershell redteam
Language:PowerShell 182
Ixve / Red-Team-Tools
Repo containing cracked red teaming tools.
adversary adversary-emulation adversary-simulation backdoor backdoors c2 command-and-control penetration-testing penetration-testing-tools pentest pentest-tool pentest-tools pentesting rat red-team red-team-tools red-teaming red-teaming-tools remote-control trojan
Language:Batchfile 128
center-for-threat-informed-defense / caldera_pathfinder
Pathfinder is a plugin for mapping network vulnerabilities, scanned by CALDERA or imported by a supported network scanner, and translating those scans into adversaries for network traversal.
adversary-emulation caldera ctid cybersecurity red-team threat-informed-defense
Language:Python 123
maddev-engenuity / AdversaryEmulation
MAD ATT&CK Defender: ATT&CK Adversary Emulation Repository
adversary-emulation mitre-attack labs training-materials
Language:Python 110
jwillyamz / ezEmu
See adversary, do adversary: Simple execution of commands for defensive tuning/research (now with more ELF on the shelf)
purpleteam adversary-emulation security-testing linux-security mitre-attack
Language:C# 101
Sam0x90 / CTI
Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on
adversary-emulation adversary-simulation cti purpleteam threat-intelligence
Language:PowerShell 81
NVISOsecurity / cyber-security-llm-agents
A collection of agents that use Large Language Models (LLMs) to perform tasks common on our day to day jobs in cyber security.
adversary-emulation ai caldera cybersecurity infosec llm
Language:Jupyter Notebook 63
pygrum / monarch
Monarch - The Adversary Emulation Toolkit
c2 command-and-control golang red-team-engagement red-teaming security-tools adversary-emulation implant red-team
Language:Go 61
adversarial-threat-modelling
ssnkhan / adversarial-threat-modelling
Supporting materials for my "Intelligence-Led Adversarial Threat Modelling with VECTR" workshop
threat-intelligence mitre-attack purpleteam adversary-emulation adversary-simulation cti redteam blueteam
57
MythicStack / Python-Security-Tool-Database
Solid Python toolkit for those in the security industry. Some by me, most by smarter people.
hacking security-tools adversary-emulation adversary-simulation awesome-list cybersecurity information-gathering infosec osint penetration-testing-tools python
56
manticore-cli
Manticore-Platform / manticore-cli
Manticore Adversary Emulation Cli
adversary-emulation redteam redteam-tools redteamer
Language:Go 46
attackevals / ael
ATT&CK Evaluations Library
adversary-emulation attack attack-evaluations cybersecurity mitre-attack mitre-engenuity purple-team red-team
Language:C 42
hideckies / hermit
A command and control framework.
adversary-emulation c2 command-and-control implant redteam
Language:C++ 37
VVX7 / nicodemus
A cross-platform Nim implant for Prelude Operator
nim pneuma adversary-emulation red-team implant operator redteam rat ost
Language:Nim 32
mitre / emu
This CALDERA Plugin converts Adversary Emulation Plans from the Center for Threat Informed Defense
adversary-emulation caldera-plugin caldera
Language:Python 29
TartarusLabs / Coyote
Coyote is a standalone C# post-exploitation implant for maintaining access to compromised Windows infrastructure during red team engagements using DNS tunneling.
adversary-emulation backdoor c2 command-and-control covert-channel dns-tunneling implant penetration-testing post-exploitation red-team red-teaming security
Language:C# 19
AutomoxSecurity / iShelly
A tool to generate macOS initial access vectors using Prelude Operator payloads
macos prelude purpleteam adversary-emulation adversary-simulation operator initial-access
Language:Python 17
center-for-threat-informed-defense / m3tid
The Measure, Maximize, and Mature Threat-Informed Defense (M3TID) project defines what Threat-Informed Defense (TID) is and the key activities associated with its practice.
adversary-emulation ctid cyber-threat-intelligence cybersecurity detection-engineering mitre-attack threat-informed-defense
Language:Makefile 12
mehgrmlhmpf / AttackGraphGeneratorMasterThesis
This work shows the viability of automatically generated attack graphs that are used for adversary behavior execution in industrial control system environments. This viability is evaluated and confirmed with expert interviews about results of this thesis, generated attack graphs and an implemented prototype.
adversary-emulation attack-graphs mitre-attack ics-security ics
12
TartarusLabs / Expeditus
Expeditus is a loader that executes shellcode on a target Windows system. It combines several offensive techniques in order to attempt to do this with some level of stealth.
adversary-emulation amsi-bypass amsi-evasion code-injection dropper penetration-testing process-injection red-team red-teaming security shellcode-injection shellcode-loader
Language:C# 12
Manticore-Platform / public-threats
Manticore's Public Threats Repository
threat-sharing threat adversary-emulation
10
hckops / hckctl
The Security Automation Toolkit
adversarial-attacks adversary-emulation bugbounty devsecops hacking mitre-attack pentesting pwnbox security-automation
Language:Go 8
soheilsec / APT-28-Simulation
شبیه سازی حمله گروه هکرهای دولتی منتسب به روسیه APT 28
adversary-emulation adversary-simulation apt28 redteam
7
Manticore-Platform / public-scenarios
Manticore's Public Threat Scenarios
redteam scenarios adversary-emulation
6
smeukinou / QRGrabber
Sliver Extension to monitor target's screen and automatically grab QRCodes displayed during MFA enrollement
adversary-emulation c2 red-team sliver
Language:C++ 3

adversary-emulation

guardicore / monkey

mitre / caldera

DataDog / stratus-red-team

center-for-threat-informed-defense / adversary_emulation_library

nshalabi / ATTACK-Tools

DataDog / KubeHound

ch33r10 / EnterprisePurpleTeaming

vectra-ai-research / MAAD-AF

f1zm0 / hades

f1zm0 / acheron

mitre / caldera-ot

password-reset / Invoke-Apex

Ixve / Red-Team-Tools

center-for-threat-informed-defense / caldera_pathfinder

maddev-engenuity / AdversaryEmulation

jwillyamz / ezEmu

Sam0x90 / CTI

NVISOsecurity / cyber-security-llm-agents

pygrum / monarch

ssnkhan / adversarial-threat-modelling

MythicStack / Python-Security-Tool-Database

Manticore-Platform / manticore-cli

attackevals / ael

hideckies / hermit

VVX7 / nicodemus

mitre / emu

TartarusLabs / Coyote

AutomoxSecurity / iShelly

center-for-threat-informed-defense / m3tid

mehgrmlhmpf / AttackGraphGeneratorMasterThesis

TartarusLabs / Expeditus

Manticore-Platform / public-threats

hckops / hckctl

soheilsec / APT-28-Simulation

Manticore-Platform / public-scenarios

smeukinou / QRGrabber