Projects sharing features with Beacon Fronting

ARTi-C2 is a post-exploitation framework used to execute Atomic Red Team test cases with rapid payload deployment and execution capabilities via .NET's DLR.

Carbon Black TAU Excel 4 Macro Analysis

Building an Active Directory domain and hacking it

Automate creating resilient, disposable, secure and agile infrastructure for Red Teams.

A PowerShell script to interact with the MITRE ATT&CK Framework via its own API

Re-play Security Events

Repo containing docker-compose files and setup scripts without having to clone the individual reternal components

ATTPwn

RTA provides a framework of scripts designed to allow blue teams to test their detection capabilities against malicious tradecraft, modeled after MITRE ATT&CK.

firedrill is a malware simulation harness for evaluating your security controls

Tehsat Malware Traffic Generator

Automated Attack Simulation in the Cloud, complete with detection use cases.

Triton is a dynamic binary analysis framework designed to automate reverse engineering. It functions as a multi-architecture CPU emulator, an SMT-based symbolic execution engine, and a dynamic taint analysis tool. The framework translates raw machine instructions into abstract syntax trees, allowing it to represent binary program logic as a structured intermediate representation. This allows the system to map multiple hardware instruction sets to a single analysis framework and translate machine instructions into mathematical formulas for solving constraints. Its capabilities cover the simul

a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and privilege escalations attacks, replicate the tactics and techniques of an advanced adversary in a network.

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.

ThreatHunt is a PowerShell repository that allows you to train your threat hunting skills.

Caldera is an adversary emulation platform and command and control framework designed to simulate cyber attack patterns. It functions as an automated red team tool and threat framework orchestrator, executing attack sequences based on standardized cybersecurity threat frameworks to validate security defenses and detection capabilities. The platform distinguishes itself through the dynamic compilation of customized executable payloads and the use of framework-mapped adversary modeling to structure attack techniques. It manages asynchronous agents on targeted endpoints via a central server acce

PurpleSharp is a C# adversary simulation tool that executes adversary techniques with the purpose of generating attack telemetry in monitored Windows environments

Test Blue Team detections without running any attack.

A toolset to make a system look as if it was the victim of an APT attack

Ransomware simulator written in Golang

Files to automatically deploy red team Active Directory test lab

Microsoft Sentinel2Go is an open source project developed to expedite the deployment of a Microsoft Sentinel research lab.

Cloud Templates and scripts to deploy mordor environments

Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs

Overlord - Red Teaming Infrastructure Automation