Infection Monkey - An open-source adversary emulation platform

Automated Adversary Emulation Platform

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

Open Adversarial Exposure Validation Platform

This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom tools, C2 servers, backdoors, exploitation techniques, stagers, bootloaders, and other malicious artifacts that mirror those used in real world attacks .

Utilities for MITRE™ ATT&CK

Tool for building Kubernetes attack paths

Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study by Xena Olsen.

The dragon in the dark. A red team post exploitation framework for testing security controls during red team assessments.

MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).

Go shellcode loader that combines multiple evasion techniques

indirect syscalls for AV/EDR evasion in Go assembly

A collection of agents that use Large Language Models (LLMs) to perform tasks common on our day to day jobs in cyber security.

MITRE Caldera™ for OT Plugins & Capabilities

Repo containing cracked red teaming tools.

Pathfinder is a plugin for mapping network vulnerabilities, scanned by CALDERA or imported by a supported network scanner, and translating those scans into adversaries for network traversal.

MAD ATT&CK Defender: ATT&CK Adversary Emulation Repository

See adversary, do adversary: Simple execution of commands for defensive tuning/research (now with more ELF on the shelf)

ATT&CK Evaluations Library

Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on

Supporting materials for my "Intelligence-Led Adversarial Threat Modelling with VECTR" workshop

Monarch - The Adversary Emulation Toolkit

Solid Python toolkit for those in the security industry. Some by me, most by smarter people.

A command and control framework.

Manticore Adversary Emulation Cli

Tor transport bridge for Sliver C2 - anonymous command and control

Adversary Simulation Framework

This CALDERA Plugin converts Adversary Emulation Plans from the Center for Threat Informed Defense

A cross-platform Nim implant for Prelude Operator