dockerized-android

Dockerized Android Dockerized Android 는 Docker 내에서 Android 에뮬레이터를 실행하고 브라우저를 통해 제어할 수 있는 컨테이너 기반 프레임워크입니다. 이 프로젝트는 모바일 보안 구성 요소를 Cyber Range에 통합하기 위한 시작점을 제공하기 위해 개발되었지만, 어떤 목적으로든 사용할 수 있습니다. 다만 개발 및 테스트 목적으로는 docker-android 프로젝트를 권장합니다. 목차 목차 소개 기능 아키텍처 핵심 구성 요소 UI 구성 요소 인스턴스 관리자 구성 요소 Docker 이미...

robodroid

RoboDroid RoboDroid는 Cyber Range 환경에서 Android 머신을 관리그리고 곧 배포까지하는 과정을 간소화하도록 설계된 최첨단 소프트웨어 도구입니다. RoboDroid를 사용하면 사용자는 Android 머신에 대해 미리 정의된 동작을 쉽게 설정하고 사용자 지정하여 복잡한 사이버 공격 시나리오를 만들고 다양한 위협에 대한 방어를 테스트할 수 있습니다. 📋 목차 📱 배경 ⚡ 개요 📚 작동 방식 Frida 에이전트와의 상호작용 🔌 설치 RoboDroid 라이브러리 ℹ️ 사용법 run 명령어 환경 변수...

BlueCloud

개요 HELK와 Velociraptor의 Cyber Range 배포! Azure 또는 AWS에서 HELK + Velociraptor 서버를 실행하는 하나의 시스템과 등록된 Windows 엔드포인트 하나를 자동으로 Terraform 배포합니다. 소규모 HELK + Velociraptor R&D 연구실을 자동으로 그리고 빠르게 배포하는 Terraform 및 Ansible 스크립트 모음입니다. 사용 사례 EDR 테스트 연구실 침투 테스트 연구실 HELK + Velociraptor를 이용한 SIEM / 위협 헌팅 / DFIR / 라이...

PENTEST-LAB

PENTEST-LAB 웹, API, 클라우드, AI, 블루팀 보안을 실습형 공격 체인을 통해 학습할 수 있는 현대적인 취약 애플리케이션 및 사이버 레인지입니다. root@kitploit: ╔═══════════════════════════════════════════════════════════════╗ ║ ██████╗ ███████╗███╗ ██╗████████╗███████╗███████╗████████╗ ║ ║ ██╔══██╗██╔════╝████╗ ██║╚══██╔══╝██╔════╝██╔════╝╚══██╔══╝ ║...

Using LLMs to Elicit Security Requirements for Service-Oriented Cyber Ranges

Cyber ranges are complex environments comprising many interacting components and stakeholders with different security concerns. The Service-Oriented Cyber Range SOR is no exception, particularly when it comes to training scenarios targeting critical infrastructure. Security concerns are translate...

Top Cyber Range Providers: A Comparison of 15 Leading Platforms

Compare 15 cyber range platforms across live-fire exercises, AI testing, SOC training, OT realism, deployment options, pricing models, and data residency needs...

From Conceptual Scaffold to Prototype: A Standardized Zonal Architecture for Wi-Fi Security Training

Wi-Fi is the dominant wireless access technology, but its widespread use also exposes systems to threats such as rogue access points, deauthentication attacks, and other IEEE 802.11-specific vulnerabilities. Although Cyber Ranges CRs have become valuable platforms for cybersecurity training and...

Brushstrokes and breaches with Terryn Valikodath

Cisco Talos is kicking off the new year with a behind-the-scenes look at incident response through the eyes of Terryn Valikodath, Senior Incident Response Consultant at Talos. In this episode, Amy sits down with Terryn to explore the realities of a job that blends technical know-how with...

Auto-SGCR: Automated Generation of Smart Grid Cyber Range Using IEC 61850 Standard Models

Digitalization of power grids have made them increasingly susceptible to cyber-attacks in the past decade. Iterative cybersecurity testing is indispensable to counter emerging attack vectors and to ensure dependability of critical infrastructure. Furthermore, these can be used to evaluate...

cyber-range-scenarios

This repository is an offensive tool for cloud-based cyber ranges, specifically for training scenarios. It contains a collection of scripts and configurations for simulating various cyber attacks and vulnerabilities, including Shell Shock and libfutex privilege escalation. The repository uses...

BlueCloud - Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D

Cyber Range deployment of HELK and Velociraptor! Automated terraform deployment of one system running HELK + Velociraptor server with one registered Windows endpoint in Azure or AWS. A collection of Terraform and Ansible scripts that automatically and quickly deploys a small HELK + Velociraptor R...

PurpleCloud - An Infrastructure As Code (IaC) Deployment Of A Small Active Directory Pentest Lab In The Cloud

Pentest Cyber Range for a small Active Directory Domain. Automated templates for building your own Pentest/Red Team/Cyber Range in the Azure cloud! Purple Cloud is a small Active Directory enterprise deployment automated with Terraform / Ansible Playbook templates to be deployed in Azure. Purple...

Threat Source newsletter (Nov. 21, 2019)

Newsletter compiled by Jon Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. It’s nearly holiday shopping season, which means it’s prime scam season. On the latest Beers with Talos episode, we run down the best wa...

DEF CON 2018: Voting Hacks Prompt Push Back from Election Officials, Vendors

LAS VEGAS – DEF CON 26, building on its work in hacking ballot machines last year, saw three days of probing into various aspects of the end-to-end voting infrastructure in place in the U.S., including a voter registration database and election reporting websites. Several vulnerabilities and...

IBM Opens Attack Simulation Test Center

CAMBRIDGE, Ma. – IBM cut the ribbon on its new global security headquarters Wednesday that will also serve as command center for its just announced X-Force Incident Response and Intelligence Services. The centerpiece of the new 153,000-sqft facility is the company’s Cyber Range which IBM bills as...

Pentagon Requests Half Billion in Funding to DARPA

In the Pentagon’s 2012 defense budget request, DARPA stands to receive roughly a half billion dollars in funding to “invest in cybertechnologies.” However, what that means is unclear. The announcement represents growing concerns by the federal government that the United States is sorely...