manuka

Manuka Description Manuka is an Open-source intelligence OSINT honeypot that monitors reconnaissance attempts by threat actors and generates actionable intelligence for Blue Teamers. It creates a simulated environment consisting of staged OSINT sources, such as social media profiles and leaked...

AD-Attack-Defense

Active Directory Kill Chain Attack & Defense Summary This document was designed to be a useful, informational asset for those looking to understand the specific tactics, techniques, and procedures TTPs attackers are leveraging to compromise active directory and guidance to mitigation, detection,...

browser-identity-attacks-matrix

Matriz de Ataques al Navegador y la Identidad Este repositorio es una colección de técnicas de ataque al navegador y la identidad que abarcan aplicaciones SaaS, ataques basados en el navegador, proveedores de identidad y phishing. Su objetivo es ser un recurso para investigadores de seguridad,...

ai-kill-chain

Extended Cyber Kill Chain for AI-Era Threats An update to the Lockheed Martin Cyber Kill Chain for defenders working against LLM and agentic AI attacks. Adds a pre-attack stage for model supply chain compromise. Adds AI-specific sub-techniques to each of the original seven stages. Splits the...

Excalibur

Excalibur pronto se actualizará para utilizar Metasploit sobre Bashbunny. Excalibur Excalibur es un exploit basado en Eternalblue en "PowerShell" para el proyecto Bashbunny. Su propósito es reflexionar sobre cómo una unidad USB "simple" puede ejecutar las 7 etapas de la cadena de ciberataque...

VECTR

Documentación de VECTR: https://docs.vectr.io Canal de Discord de la comunidad VECTR: https://discord.gg/2FRd8zf728 VECTR es una herramienta que facilita el seguimiento de las actividades de prueba de tus equipos rojo y azul para medir las capacidades de detección y prevención en diferentes...

killchain

killchain “Kill Chain” is a unified console with an anonymizer that will perform these stages of attacks: Reconnaissance Weaponization Delivery Exploit Installation Command & Control And Actions Dependent tool sets are: 1...

FlowiseAI-Critical-KillChain

FlowiseAI — Critical Kill Chain Unauthenticated Account Takeover chained with Remote Code Execution against FlowiseAI Full container compromise in under 5 seconds , zero credentials required. Kill Chain...

soc-investigation-lab

End-to-End SOC Investigation Lab Executes a complete four-phase attack chain Reconnaissance → Exploitation → Persistence → Exfiltration against Metasploitable2, collects evidence at each phase, and produces a structured incident timeline and SOC report — demonstrating simultaneous attacker and...

SiemX

SIEM-X A lightweight Security Orchestration, Automation, an...

Weaponized AI: The Commoditization of Cybercrime

Weaponized AI: The Commoditization of Cybercrime By Jambul Tologonov · August 12, 2026 Executive Summary The Trellix Advanced Research Center has been actively monitoring dark web forums and criminal communication channels for emerging threats tied to artificial intelligence AI. What we are...

ExploitMind

ExploitMind v1.0.0 Full APT Kill-Chain Exploitation Framew...

deep-pentest-skill

Deep Pentest Skill !License: MIThttps://img.shields.io/bad...

Red-Teaming the Agentic Red-Team

The use of agentic systems to perform offensive security operations has moved from a theoretical possibility to a commoditized capability. However, while the community has focused on creating more and more capable agents, less attention has been allocated to assessing the security of those system...

offensive-claude-533

Offensive Security Research Config for Claude Code !TIP...

offensive-claude-604

Offensive Security Research Config for Claude Code !TIP...

offensive-claude-813

Offensive Security Research Config for Claude Code !TIP...

offensive-claude-982

Offensive Security Research Config for Claude Code !TIP...

offensive-claude-490

Offensive Security Research Config for Claude Code !TIP...

A Red Teaming Framework for Evaluating Robustness of AI-Enabled Security Orchestration, Automation, and Response Systems

AI-enabled Security Orchestration, Automation, and Response SOAR systems increasingly employ autonomous agents for cyber defense, yet their resilience to adaptive adversaries is underexplored. We introduce an autonomous red teaming framework that integrates large language models LLMs with...