atomic-red-team

Atomic Red Team Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments. Get started You can execute atomic tests directly from the command line, no installation required. S...

reternal-quickstart

RE:TERNAL Note: Still under development, only use for testing and do not expose interfaces! Current compose doesn't work yet, only try when you know what you're doing RE:TERNAL is a centralised purple team orchestration service to manage third-party C2 frameworks. Agents are installed on endpoint...

metta

Metta Metta는 정보 보안 대비 도구입니다. 이 프로젝트는 Redis/Celery, python, vagrant 및 virtualbox를 사용하여 적대적 시뮬레이션을 수행합니다. 이를 통해 대부분 호스트 기반 계측을 테스트할 수 있지만, vagrant를 설정하는 방식에 따라 네트워크 기반 탐지 및 제어도 테스트할 수 있습니다. 프로젝트는 액션이 포함된 yaml 파일을 구문 분석하고 celery를 사용하여 이러한 액션을 대기열에 넣고 상호 작용 없이 하나씩 실행합니다. 설치 setup.md 보기 또한 위키가 있습니다. 액...

mettacapital.co.za Cross Site Scripting vulnerability OBB-3917391

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

List of Adversary Emulation Tools

PenTestIT RSS Feed Every once in a while, the security industry brings forth a new buzz word and introduces terminologies that sound über cool and generate lot's of interest. One such word going around now-a-days is automated "adversary emulation". Let's first understand what this really means...

Information Security Preparedness Tool: Metta

Metta is an open-source information security preparedness tool for adversarial simulation. As an emerging concept, the industry has yet to settle on a definitive definition of adversarial simulation, but it involves simulating components of targeted attacks in order to test both an organization’s...