Automated Adversary Emulation Platform
- adversary-emulation
- caldera
- security-automation
- red-team
47,133 repositories indexed
25–48 of 103 · Most stars
Automated Adversary Emulation Platform
RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
Common User Passwords Profiler (CUPP)
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
w3af: web application attack and audit framework, the open source web vulnerability scanner.
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
Rapidly Search and Hunt through Windows Forensic Artefacts
The repository host gives no description.
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
Wireless keystroke injection attack platform
A repository of sysmon configuration modules
A toolset to make a system look as if it was the victim of an APT attack
Windows Events Attack Samples
Security sensor for realtime threat detection and protection
Crack legacy zip encryption with Biham and Kocher's known plaintext attack.
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.
Creates up to a thousand WiFi access points with custom SSIDs.
ThePhish: an automated phishing email analysis tool
The repository host gives no description.