Lab4PurpleSec

Lab4PurpleSec Note : This project was previously named "Lab4OffSec" and has been renamed to "Lab4PurpleSec" to better reflect its Purple Team focus. Note : This is a V1. Feedback and contributions are welcome. 📜 License Notice : The use of this project including for CTFs, commercial projects,...

SCOPE

SCOPE: Security Cloud Ops Purple Engagement SCOPE runs AWS purple-team workflows with deterministic Python inventory and bounded AI agents. It audits AWS resources, validates attack paths, generates review-only exploit playbooks, produces controls, and guides Splunk investigations. How It Works R...

arkime

Arkime Arkime is a large scale, open-source network analysis and packet capture system. Arkime augments your current security infrastructure to store and index network traffic in standard PCAP format, providing fast, indexed access. An intuitive and simple web interface is provided for PCAP...

magnet

Magnet Draw the Signals, Detect the Threats. Abstract Magnet is Purple-team telemetry & simulation toolkit. Purpose: modular, cross-platform eventually generator for telemetry and malicious activity. Why the name? Because this attracts SOC analysts and detection rules! 😜 As a secondary use case,...

ThreatHunting-JupyterNotebooks

🟣 Weekly Purple Team - Threat Hunting Notebooks A collection of threat hunting and detection engineering Jupyter notebooks accompanying the Weekly Purple Team YouTube channel. Each notebook provides detection logic to help security professionals understand both offensive techniques and defensive...

ULTIMATE-CYBERSECURITY-MASTER-GUIDE

🛡️ ULTIMATE CYBERSECURITY MASTER GUIDE Professional Cybersecurity Knowledge Base · Red Team · Blue Team · Purple Team Compiled from 70+ expert books · 90+ PNWC internal documents · custom tools & scripts Abide by theLegal Terms of Use & Disclaimer for the use and misuse of this repository. "Under...

TTPRunner

TTPRunner Autonomous TTP execution agent for purple team operations Feed it a threat report. It builds the attack plan. You approve. It executes. Features Screenshots Dashboard Input| Execution Plan Graph ---|--- | Step Edit Modal| Execution Detail ---|--- | Targets| VECTR Integration ---|---...

PurpleOps

PurpleOps An open-source self-hosted purple team management web application. Key Features • Installation • Contact Us • •...

metta

Metta Metta is an information security preparedness tool. This project uses Redis/Celery, python, and vagrant with virtualbox to do adversarial simulation. This allows you to test mostly your host based instrumentation but may also allow you to test any network based detection and controls...

BadZure

BadZure BadZure is a Python tool that automates the creation of misconfigured Azure environments, enabling security teams to simulate adversary techniques, develop and test detection controls, and run purple team exercises across Entra ID and Azure infrastructure. It uses Terraform to populate...

chipwhisperer

ChipWhisperer | | Important Links Documentation | Tutorials | Forum | Store | NewAE ChipWhisperer 6.0: Repo Changes and Cleanup ChipWhisperer 6.0 is bringing many changes to the ChipWhisperer repository. The biggest one is a cleanup of the git history on both this repo and chipwhisperer-jupyter, ...

Wifi-Purple

🌐 WIFI-PURPLE 🌐 Automate script for wifi hacking This Python script, titled "WIFI-PURPLE," is a network tool designed for WiFi security testing and hacking. It provides a user-friendly command-line interface and utilizes popular network tools to perform various wireless network-related tasks...

TTPForge

TTPForge TTPForge 是一个网络攻击模拟平台，由 Sam Manzer @d3sch41n、 Alek Straumann @CrimsonK1ng 和 Geoff Pamerleau @Sy14r 设计并构建，并包含了来自 Meta 红队、蓝队和紫队 众多同仁的后续贡献。 Jayson Grace @l50 将项目迁移到 GitHub，并 协助完成了项目开源发布前的准备工作。 本项目在网络安全领域倡导紫队 方法，目标如下： 通过高保真模拟真实攻击者活动，帮助蓝队准确衡量其检测和响应能力。 通过将攻击打包为自动化、可重复的模拟，帮助红队提高其发现成果的 ROI/可操作性。...

purple-team-exercise-framework

紫队演练框架 PTEF 紫队演练框架 PTEF 是设计和执行协作式安全演练的行业标准方法论，它将网络威胁情报 CTI、红队和蓝队汇聚在一起。 紫队演练是一种高效的方法，可用于测试、衡量并提升您的组织抵御真实网络攻击的能力。该框架涵盖： 紫队演练 - 临时性的协作演练 常态化紫队 - 持续的虚拟团队协作 专职紫队 - 专职人员角色 v4 新增内容 PTEFv4 是一次全面 overhaul，重点关注从业者易用性 ： 快速参考一页纸 - 可在演练期间使用的可打印单页指南 改进的文档 - 精简的导航、修复的错误、更清晰的组织 云与身份覆盖 - 云环境、身份提供商和现代基础设施的范围界定...

presentations

Christopher Peacock 的演讲 年份| 组织| 演讲标题| 幻灯片| 视频 ---|---|---|---|--- 2023| BSides Tampa| 紫队101| 幻灯片| 2022| SANS PenTest HackFest 2022| 实战前线：紫队的该做与不该做| 幻灯片| YouTube 2022| BSides St Petersburg| TTP 金字塔| 幻灯片| YouTube 2022| DEFCON Adversary Village| 工作坊：通过对手模拟进行攻击与防御| 幻灯片| 2022| SCYTHE| 2022年7月与 Chris...

Purpleteam

Purpleteam work in progress 我编写的脚本，用于触发 SOC 检测事件，并映射到 MITRE ATT&CK 技术。...

purpleteam

purpleteam CLI CLI component of purpleteam - Currently in alpha Installation Simplest npm install -g purpleteam...

reternal-quickstart

RE:TERNAL 注意：仍在开发中，仅用于测试，请勿暴露接口！当前 compose 尚无法正常工作，仅在了解你在做什么时尝试 RE:TERNAL 是一个集中化的紫队编排服务，用于管理第三方 C2 框架。代理安装在终端上，以执行各种已知的红队技术，从而测试蓝队能力。模拟结果映射到 MITRE ATT&CK 框架。此仓库包含用于通过 docker 设置 reternal 平台的 compose 文件。 有一个公开预览版正在运行最新版本 @ https://reternal.d3vzer0.com（需要 Github 登录）。执行/保存活动以及与 C2 模块的交互已被禁用（原因显而易见 ;）...

reternal-quickstart

RE:TERNAL Note: Still under development, only use for testing and do not expose interfaces! Current compose doesn't work yet, only try when you know what you're doing RE:TERNAL is a centralised purple team orchestration service to manage third-party C2 frameworks. Agents are installed on endpoint...

DDoS-Purple-Teaming-Offensive-Multi-Vector-7-Tier-Defensive-Holistic-Blueprint-

= doi.org/10.5281/zenodo.18287026 = orcid.org/0009-0007-7728-256X Project: DDoS Purple Elite Teaming Exhaustive Analysis 2026 Author: SASTRAADIWIGUNA PurpleEliteTeaming ⚠️ MANDATORY LEGAL DISCLAIMER This repository and its documentation are strictly for educational, defensive, and authorized...