94 matches found
Excalibur
Excalibur will soon be updated to utilize Metasploit over the Bashbunny. Excalibur Excalibur is an Eternalblue exploit based "Powershell" for the Bashbunny project. It's purpose is to reflect on how a "simple" USB drive can execute the 7 cyber kill chain. Excalibur may be used only for...
VECTR
VECTR documentation: https://docs.vectr.io VECTR Community Discord Channel: https://discord.gg/2FRd8zf728 VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios. VECTR provides the...
manuka
Manuka Description Manuka is an Open-source intelligence OSINT honeypot that monitors reconnaissance attempts by threat actors and generates actionable intelligence for Blue Teamers. It creates a simulated environment consisting of staged OSINT sources, such as social media profiles and leaked...
killchain
killchain “Kill Chain” is a unified console with an anonymizer that will perform these stages of attacks: Reconnaissance Weaponization Delivery Exploit Installation Command & Control And Actions Dependent tool sets are: 1. Tor -- For the console build-in Anonymizer. 2. Set -- Social-Engineer...
ai-kill-chain
Chaîne de cyberattaque étendue pour les menaces de l'ère de l'IA Une mise à jour de la Cyber Kill Chain de Lockheed Martin pour les défenseurs confrontés aux attaques par LLM et IA agentique. Ajoute une étape de pré-attaque pour la compromission de la chaîne d'approvisionnement des modèles. Ajout...
browser-identity-attacks-matrix
Browser & Identity Attacks Matrix This repository is a collection of browser and identity attack techniques covering SaaS apps, browser-based attacks, identity providers, and phishing. It is intended to be a resource for security researchers, red/blue teams, and penetration testers to learn about...
AD-Attack-Defense
هجوم سلسلة القتل والدفاع في Active Directory الملخص صُمم هذا المستند ليكون مرجعًا معلوماتيًا مفيدًا لمن يسعى إلى فهم التكتيكات والتقنيات والإجراءات TTPs المحددة التي يستخدمها المهاجمون لاختراق Active Directory، مع إرشادات حول التخفيف والكشف والوقاية. كما يشرح هجوم سلسلة القتل في Active Directory...
soc-investigation-lab
مختبر تحقيقات SOC متكامل ينفّذ سلسلة هجوم كاملة من أربع مراحل استطلاع ← استغلال ← ثبات ← تسريب بيانات ضد Metasploitable2، ويجمع الأدلة في كل مرحلة، وينتج خطًا زمنيًا منظمًا للحادث وتقرير SOC — مما يُظهر التفكير المتزامن للمهاجم والمدافع. الهدف هذا هو المشروع الختامي. يبيّن القدرة على: تنفيذ سلسلة...
FlowiseAI-Critical-KillChain
FlowiseAI — سلسلة القتل الحرجة استيلاء غير مصادق على الحساب مقترن بتنفيذ تعليمات برمجية عن بُعد ضد FlowiseAI اختراق كامل للحاوية في أقل من 5 ثوانٍ ، بدون حاجة لأي بيانات اعتماد. سلسلة القتل يسار: صفحة تسجيل الدخول لـ FlowiseAI — يمين: شل الجذر عبر CVE-2025-59528 · uid=0root جدول المحتويات كيف يعم...
No One Architecture Fits All: A Cross-Environment Evaluation of Hierarchical Red Team Agents
Autonomous red team agents increasingly stress-test AI-enabled cyber defenses by planning strategy and executing multistage attacks. Reinforcement learning RL and large language models LLMs offer complementary mechanisms for the planning and execution such agents require, and prior work has...
Booz Allen Cyber Weapon Index
The new Booz Allen Cyber Weapon Index CWI confirms that autonomous offensive cyber has arrived. A leading frontier AI model can now independently execute the full cyber kill chain against a real network—crossing a critical threshold from AI-assisted hacking to autonomous cyber operations. This is...
SiemX
SIEM-X A lightweight Security Orchestration, Automation, an...
kill-chain-vulnerability-scanner
Kill Chain Scanner A Python-based automated web applicatio...
Weaponized AI: The Commoditization of Cybercrime
Weaponized AI: The Commoditization of Cybercrime By Jambul Tologonov · August 12, 2026 Executive Summary The Trellix Advanced Research Center has been actively monitoring dark web forums and criminal communication channels for emerging threats tied to artificial intelligence AI. What we are...
Cybersecurity-writeups-
Security Write-ups A collection of cybersecurity case studies...
ExploitMind
ExploitMind v1.0.0 Full APT Kill-Chain Exploitation Framew...
GARAGE: Characterizing the Automation Boundary in LLM-Based Attack Graph Generation
While modern vehicle security depends on effective Cyber Threat Intelligence CTI synthesis, current automated tools struggle with unstructured data and automotive-specific architectural nuances. To bridge this gap, we introduce GARAGE, a RAG-powered framework that converts fragmented CTI into an...
deep-pentest-skill
Deep Pentest Skill !License: MIThttps://img.shields.io/bad...
Red-Teaming the Agentic Red-Team
The use of agentic systems to perform offensive security operations has moved from a theoretical possibility to a commoditized capability. However, while the community has focused on creating more and more capable agents, less attention has been allocated to assessing the security of those system...