102 matches found
robodroid
RoboDroid RoboDroid is a cutting-edge software tool designed to simplify the process of managing and very soon also deploying Android machines for usage in Cyber Range environments. With RoboDroid, users can easily set up and customize pre-defined behaviors for their Android machines, allowing th...
attack_range
Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...
soc-automation-lab
SOC Automation Lab This repository documents the design, detection logic, automation workflows, and lessons learned from building an automated SOC demo using open-source tools. The project focuses on how alerts move from detection to investigation and notification , and what breaks along the way...
gotestwaf
GoTestWAF GoTestWAF es una herramienta para la simulación de ataques a API y OWASP que soporta una amplia variedad de protocolos de API, incluyendo REST, GraphQL, gRPC, SOAP, XMLRPC, y otros. Fue diseñada para evaluar soluciones de seguridad de aplicaciones web, como proxies de seguridad de API,...
Cyber-Attack-Simulation-
Cyber-Attack-Simulation- Log4Shell CVE-2021-44228...
TTPForge
TTPForge TTPForge es una plataforma de simulación de ciberataques diseñada y construida por Sam Manzer @d3sch41n, Alek Straumann @CrimsonK1ng y Geoff Pamerleau @Sy14r, con contribuciones posteriores de muchas personas excelentes de los equipos de seguridad Rojo, Azul y Púrpura de Meta. Jayson Gra...
attack_range
Splunk Attack Range v5 El Splunk Attack Range construye entornos cloud instrumentados AWS, Azure, GCP, simula ataques y reenvía datos a Splunk para el desarrollo y pruebas de detección. Qué hace: Construye laboratorios — Despliega un laboratorio pequeño y similar a producción Splunk, servidores...
MalwLess
MalwLess Simulation Tool MST MalwLess is an open source tool that allows you to simulate system compromise or attack behaviours without running processes or PoCs. The tool is designed to test Blue Team detections and SIEM correlation rules. It provides a framework based on rules that anyone can...
nccfsas
Introducción Este repositorio contiene información publicada públicamente por el equipo de Full Spectrum Attack Simulation FSAS de NCC Group...
AtomicTestHarnesses
AtomicTestHarnesses AtomicTestHarnesses es una biblioteca que simula y valida la ejecución de técnicas de ataque. Consiste en un módulo de Powershell para ejecutar técnicas de ataque en Windows y también un paquete de Python para ejecutarlas en macOS y Linux Los detalles de una técnica pueden...
http2-security-lab
🦣 Laboratorio de Seguridad HTTP/2 de TuskMads Un laboratorio de simulación de ataques y defensa HTTP/2 construido desde cero en Python puro. Qué hace esto Simula 3 ataques HTTP/2 reales contra un servidor vulnerable, y luego demuestra 5 capas de defensa que bloquean los 3 en un servidor reforzado...
pcybox-attackgraph
PCYBOX AttackGraph Build. Attack. Defend. Understand. An open source lab that runs entirely in your browser: build a simulated infrastructure, watch an attack move through it , and check whether your defense really works. Every step comes with the reason it worked, and every control says exactly...
From Attack Simulation to SIEM Rule: Deterministic Detection-As-Code Synthesis with Probe-Level Traceability
Security teams routinely simulate attacks against their own systems to check whether their monitoring would catch a real intruder. These Breach-and-Attack-Simulation BAS tools surface findings, but the security information and event management SIEM systems that watch production need detection rul...
CrowdStrike vs Hive Pro: VM Compared
CrowdStrike vs Hive Pro for Vulnerability Management CrowdStrike vs Hive Pro is not a simple feature checklist. It is a decision about how your security team wants to manage exposure: through an endpoint-centered platform that extends into vulnerability assessment, or through a vendor-neutral...
Security Analysis of a Communication Protocol: MQTT
This paper analyzes the security of the Message Queuing Telemetry Transport MQTT protocol in the context of the Internet of Things IoT. The main objective consists of identifying vulnerabilities and proposing security improvements. Adopting a hybrid methodology, a theoretical review was combined...
Benefits of Breach and Attack Simulation in Vulnerability Management
Vulnerability management teams face an overwhelming challenge: tens of thousands of CVEs published annually, limited remediation capacity, and no reliable way to separate genuine threats from background noise. Traditional approaches rely on CVSS scores and scanner output, but these methods lack t...
What Is a Risk-Based Vulnerability Management Platform?
A vulnerability scanner tells you where the cracks are in your defenses, but it doesn't tell you which ones an attacker will actually use. To truly understand your exposure, you need to see your network from their perspective. How can a low-severity flaw on one server be combined with a...
What Is a Risk-Based Vulnerability Management Tool?
Your security team is talented, but they aren't miracle workers. With a persistent skills shortage and ever-tightening budgets, asking them to patch every single vulnerability is not just unrealistic; it's inefficient. Chasing low-risk issues wastes valuable time and leads to burnout, all while...
What Makes a Vulnerability Management Dashboard Effective?
Let's be direct: a high CVSS score doesn't mean a vulnerability is a top priority for your organization. Attackers don't care about theoretical scores; they care about clear, exploitable pathways to your critical assets. If your vulnerability management dashboard is only showing you generic...
