fireeye/commando-vm
7,668 Stars·1,351 Forks·PowerShell·Apache-2.0·3 Aufrufewww.mandiant.com/resources/blog/commando-vm-windows-offensive-distribution↗
Commando Vm
Commando-VM is a Windows penetration testing distribution and offensive security toolkit. It provides a specialized virtual machine environment loaded with a curated suite of security auditing and exploitation tools designed for red teaming operations.
The project facilitates the creation of red team infrastructure and security audit environments. It focuses on windows security auditing and penetration testing to help simulate adversary behavior and identify exploitable security flaws.
The environment is established through script-based provisioning and modular toolset deployment. This process includes curated dependency mapping, windows-native tool integration, and post-installation configuration profiles to prepare the system for security assessments.
Features
- Offensive & Red Team Operations - Provides a comprehensive platform for offensive and red team operations on Windows.
- Offensive Security Tools - Provides a vast collection of tools for penetration testing, exploit generation, and security research.
- Penetration Testing Distributions - Ships a pre-configured Windows distribution loaded with a curated suite of offensive security and red teaming utilities.
- Offensive Security Operations - Deploys a specialized collection of red teaming tools to facilitate offensive security operations.
- Red Team Operations - Establishes specialized virtual machine infrastructure for simulating adversary behavior and conducting red team exercises.
- Installation Scripts - Uses coordinated batch and PowerShell scripts to automate the provisioning of the security environment.
- Security Auditing Tools - Includes a curated set of security auditing tools to identify misconfigurations and flaws in Windows environments.
- Penetration Testing Suites - Provides a comprehensive suite of specialized tools designed to automate penetration testing tasks on Windows.
- Penetration Testing Frameworks - Ships a pre-configured environment for simulating cyber attacks to identify vulnerabilities within Windows systems.
- Toolsets - Implements a modular deployment system that allows users to selectively install specific offensive capability sets.
- System Configuration Profiles - Applies specific system configuration profiles and registry tweaks to optimize the OS for penetration testing tools.
- Security Audit Virtual Machines - Provides a specialized virtual machine environment designed for consistent and reproducible network security assessments.
- Windows Security Utilities - Automated deployment of penetration testing tools on Windows.
