redjoust

ᵔᴥᵔ RedJoust A quick and easy to use security reconnaissance webapp tool, does OSINT, analysis and red-teaming in both passive and active mode. Written in nodeJS and Electron. Join the community Join the community of Kawaiipantsu / THUGSred and participate in the dev talk around Redjoust or simpl...

RedTeaming-Tactics-and-Techniques

description: - These are notes about all things focusing on, but not limited to, red teaming and offensive security. What is ired.team notes? This is publicly accessible personal red teaming notes at https://ired.team and https://github.com/mantvydasb/RedTeam-Tactics-and-Techniques about my...

Red-Teaming-Toolkit

Red Teaming Toolkit This repository contains cutting-edge open-source security tools OST that will help you during adversary simulation and as information intended for threat hunter can make detection and prevention control easier. The list of tools below that could be potentially misused by thre...

Awesome-Hacking-Resources

Awesome Hacking Resources A curated collection of hacking, penetration testing, and AI red-teaming resources to make you better...

inceptor

🚩 This is the public repository of Inceptor, for latest version and updates please consider supporting us through https://porchetta.industries/ 🚩 Sponsors If you want to sponsors this project and have the latest updates on Inceptor, latest issues fixed, latest features, please support us on...

threatbox

Threatbox - Plataforma de Ataque Estándar ThreatBox es una plataforma de ataque estándar y controlada basada en Linux. He utilizado una versión de esto durante años. Comenzó como una colección de scripts, existió como una máquina virtual continua, se convirtió en código para construir una ISO de...

Mythic

Mythic A cross-platform, post-exploit, red teaming framework built with GoLang, docker, docker-compose, and a web browser UI. It's designed to provide a collaborative and user friendly interface for operators, managers, and reporting throughout red teaming. Check out a series of YouTube videos...

pwndrop

pwndrop is a self-deployable file hosting service for sending out red teaming payloads or securely sharing your private files over HTTP and WebDAV. If you've ever needed to quickly set up an nginx/apache web server to host your files and you were never happy with the limitations of python -m...

siras

SIRAS v3.0 is a modern Security Incident Response Automated Simulation framework designed to manage red teaming exercises as code. You can execute controlled security simulations that test your Incident Response plan in realistic scenarios. The main goal of SIRAS is to provide red teaming exercis...

giskard-oss

Evals, Red Teaming and Test Generation for Agentic Systems Modular, Lightweight, Dynamic and Async-first...

CrucibleC2

HardHat C2 A cross-platform, collaborative, Command & Control framework written in C, designed for red teaming and ease of use HardHat is a multi-user C .NET-based command and control C2 framework designed to aid in red team engagements and penetration testing. It aims to improve quality-of-life...

commando-vm

What is CommandoVM? Complete Mandiant Offensive VM "CommandoVM" is a comprehensive and customizable, Windows-based security distribution for penetration testing and red teaming. CommandoVM comes packaged with a variety of offensive tools not included in Kali Linux which highlight the effectivenes...

redherd-framework

...

garak

garak, LLM vulnerability scanner Generative AI Red-teaming & Assessment Kit garak checks if an LLM can be made to fail in a way we don't want. garak probes for hallucination, data leakage, prompt injection, misinformation, toxicity generation, jailbreaks, and many other weaknesses. If you know nm...

Awesome-Red-Teaming

This List is no longer updated. Awesome Red Teaming List of Awesome Red Team / Red Teaming Resources This list is for anyone wishing to learn about Red Teaming but do not have a starting point. Anyway, this is a living resources and will update regularly with latest Adversarial Tactics and...

overlord

Overlord – 红队自动化 Overlord 提供了一个基于 Python 的控制台 CLI，用于以自动化方式构建红队基础设施。用户可以通过该工具的模块（例如 C2、邮件服务器、HTTP Web 投递服务器、钓鱼服务器等）提供输入，然后在所选的云提供商上自动生成完整的基础设施/模块和脚本。目前支持 AWS 和 Digital Ocean。该工具仍在开发中，其灵感来自并使用 GitHub 上的 Red-Baron Terraform 实现。 我们的博客文章 https://qsecure.com.cy/resources/publications/overlord/...

overlord

Overlord – Red Teaming Automation Overlord provides a python-based console CLI which is used to build Red Teaming infrastructure in an automated way. The user has to provide inputs by using the tool’s modules e.g. C2, Email Server, HTTP web delivery server, Phishing server etc. and the full infra...

dns-black-cat

DNS-Black-CatDBC Kit multiplataforma para un shell DNS C2C interactivo. Usando DNS-Black-Cat, podrá ejecutar comandos del sistema en modo shell a través de un canal encubierto completamente cifrado. Servidor Portado como un script de Python, que actúa como servidor DNS con las funcionalidades...

nishang

Nishang Nishang 是一个框架和脚本及 payload 集合，支持使用 PowerShell 进行 offensive security、渗透测试和 red teaming。Nishang 在渗透测试的所有阶段都很有用。 作者：Nikhil Mittal Altered Security - 动手红队和企业安全培训！ 创始人 使用 在当前的 PowerShell 会话中导入所有脚本（PowerShell v3 及以上版本）。 root@kitploit: PS C:\nishang Import-Module .\nishang.psm1 使用点加载（dot...

warberry

This project is no longer maintained by the developer...