mandiant/commando-vm
7,667 stele·1,353 fork-uri·PowerShell·Apache-2.0·2 vizualizăriwww.mandiant.com/resources/blog/commando-vm-windows-offensive-distribution↗
Commando Vm
Commando VM is a Windows-based penetration testing distribution and offensive security virtual machine. It serves as a toolset manager for deploying and maintaining a curated collection of security tools, scripts, and configurations designed for security auditing, red teaming, and adversary simulation.
The project automates the provisioning of a specialized workstation by using PowerShell scripts and a modular repository to orchestrate the installation of offensive security software. It utilizes a community-driven package manager to handle dependency resolution and binary installations, ensuring a consistent environment for conducting network attacks and vulnerability research.
The distribution further optimizes the host operating system through post-installation environment configurations, including system-wide registry changes and environment variable updates. These capabilities provide a dedicated infrastructure for performing formal security assessments and simulating advanced adversary tactics.
Features
- Security Audit Virtual Machines - Provides a specialized virtual machine image pre-loaded with a curated collection of offensive security tools.
- Penetration Testing Distributions - Offers a pre-configured Windows operating system distribution bundled with a wide array of penetration testing utilities.
- Offensive Security Tools - Provides a comprehensive suite of frameworks and utilities for reconnaissance, scanning, and exploitation.
- Pentesting Frameworks - Provides a comprehensive environment for orchestrating red team operations and security assessments.
- Red Team Operations - Establishes a dedicated infrastructure and workstation for simulating advanced adversary tactics.
- Installation Scripts - Uses automated PowerShell scripts to orchestrate the download and installation of diverse security tools.
- Toolsets - Organizes a vast array of security utilities into discrete, selectable toolsets for targeted deployment.
- OS Distributions - Bundles a curated collection of security software and configurations into a specialized Windows distribution.
- Penetration Testing Suites - Ships a complete suite of specialized tools designed to automate Windows-based security research and penetration testing.
- Chocolatey Package Support - Provides integrated support for installing security tools via the Chocolatey package manager on Windows.
- Security Toolset Managers - Serves as a manager for deploying and updating a comprehensive repository of security tools on Windows.
- Security Tool Managers - Provides a system for the lifecycle management, updating, and maintenance of security binaries.
- Security Tool Image Deployment - Enables the deployment of pre-configured environments bundled with offensive security toolsets.
- OS Optimizations - Applies critical registry changes and environment updates to optimize Windows for offensive security activities.
- Red Team Workstations - Provides a specialized Windows environment designed for simulating advanced adversary attacks.
- Security Practice Labs - Windows-based environment pre-configured for penetration testing tasks.
