MalwLess

MalwLess Simulationstool MST MalwLess ist ein Open-Source-Tool, mit dem Sie Systemkompromittierungen oder Angriffsverhalten simulieren können, ohne Prozesse oder PoCs auszuführen. Das Tool wurde entwickelt, um Blue-Team-Erkennungen und SIEM-Korrelationsregeln zu testen. Es bietet ein Framework, d...

http2-security-lab

🦣 TuskMads Laboratorio di Sicurezza HTTP/2 Un laboratorio di simulazione e difesa degli attacchi HTTP/2 costruito da zero in puro Python. Cosa Fa Simula 3 attacchi HTTP/2 reali contro un server vulnerabile, poi dimostra 5 livelli di difesa che bloccano tutti e 3 su un server protetto. Attacchi...

attack_range

Splunk Attack Range v5 يبني Splunk Attack Range بيئات سحابية مجهزة بالأدوات AWS, Azure, GCP، ويحاكي الهجمات، ويُمرر البيانات إلى Splunk لتطوير الكشف والاختبار. ما يفعله: بناء مختبرات — نشر مختبر صغير يشبه الإنتاج Splunk، خوادم Windows/Linux، اختياري Kali، Zeek، إلخ عبر Terraform وAnsible. محاكاة...

attack_range

Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...

nccfsas

Einleitung Dieses Repository enthält Informationen, die vom Full Spectrum Attack Simulation FSAS-Team der NCC Group öffentlich veröffentlicht wurden...

gotestwaf

GoTestWAF GoTestWAF è uno strumento per la simulazione di attacchi API e OWASP che supporta un'ampia gamma di protocolli API, tra cui REST, GraphQL, gRPC, SOAP, XMLRPC e altri. È stato progettato per valutare soluzioni di sicurezza per applicazioni web, come proxy di sicurezza API, Web Applicatio...

AtomicTestHarnesses

AtomicTestHarnesses AtomicTestHarnesses è una libreria che simula e convalida l'esecuzione di tecniche di attacco. È composta da un modulo PowerShell per l'esecuzione di tecniche di attacco su Windows e da un pacchetto Python per l'esecuzione su macOS e Linux. I dettagli di una tecnica possono...

TTPForge

TTPForge TTPForge è una piattaforma di simulazione di attacchi informatici progettata e sviluppata da Sam Manzer @d3sch41n, Alek Straumann @CrimsonK1ng e Geoff Pamerleau @Sy14r, con successivi contributi di molte brave persone nei team di sicurezza Red, Blue e Purple di Meta. Jayson Grace @l50 ha...

Cyber-Attack-Simulation-

Cyberangriff-Simulation- Log4Shell CVE-2021-44228...

robodroid

RoboDroid RoboDroid è uno strumento software all'avanguardia progettato per semplificare la gestione e molto presto anche il deployment di macchine Android per l'utilizzo in ambienti Cyber Range. Con RoboDroid, gli utenti possono facilmente configurare e personalizzare comportamenti predefiniti p...

soc-automation-lab

Laboratorio di Automazione SOC Questo repository documenta la progettazione, la logica di rilevamento, i flussi di lavoro di automazione e le lezioni apprese dalla costruzione di un SOC demo automatizzato utilizzando strumenti open-source. Il progetto si concentra su come gli alert passano dal...

From Attack Simulation to SIEM Rule: Deterministic Detection-As-Code Synthesis with Probe-Level Traceability

Security teams routinely simulate attacks against their own systems to check whether their monitoring would catch a real intruder. These Breach-and-Attack-Simulation BAS tools surface findings, but the security information and event management SIEM systems that watch production need detection rul...

CrowdStrike vs Hive Pro: VM Compared

CrowdStrike vs Hive Pro for Vulnerability Management CrowdStrike vs Hive Pro is not a simple feature checklist. It is a decision about how your security team wants to manage exposure: through an endpoint-centered platform that extends into vulnerability assessment, or through a vendor-neutral...

Security Analysis of a Communication Protocol: MQTT

This paper analyzes the security of the Message Queuing Telemetry Transport MQTT protocol in the context of the Internet of Things IoT. The main objective consists of identifying vulnerabilities and proposing security improvements. Adopting a hybrid methodology, a theoretical review was combined...

Benefits of Breach and Attack Simulation in Vulnerability Management

Vulnerability management teams face an overwhelming challenge: tens of thousands of CVEs published annually, limited remediation capacity, and no reliable way to separate genuine threats from background noise. Traditional approaches rely on CVSS scores and scanner output, but these methods lack t...

What Is a Risk-Based Vulnerability Management Platform?

A vulnerability scanner tells you where the cracks are in your defenses, but it doesn't tell you which ones an attacker will actually use. To truly understand your exposure, you need to see your network from their perspective. How can a low-severity flaw on one server be combined with a...

What Is a Risk-Based Vulnerability Management Tool?

Your security team is talented, but they aren't miracle workers. With a persistent skills shortage and ever-tightening budgets, asking them to patch every single vulnerability is not just unrealistic; it's inefficient. Chasing low-risk issues wastes valuable time and leads to burnout, all while...

What Makes a Vulnerability Management Dashboard Effective?

Let's be direct: a high CVSS score doesn't mean a vulnerability is a top priority for your organization. Attackers don't care about theoretical scores; they care about clear, exploitable pathways to your critical assets. If your vulnerability management dashboard is only showing you generic...

simple-ids

Simple IDS - Intrusion Detection System !License: MIThttp...

External Attack Surface Management: What It Is, Why It Matters, and How to Get It Right

Every organization with internet-facing assets has an external attack surface. The question is whether you can see all of it before an attacker does. External attack surface management EASM gives security teams the continuous visibility, context, and control they need to find and fix exposures...