adversary-simulation

Star

Here are 44 public repositories matching this topic...

Language:All

Filter by language

All44 Python11 Go9 C#5 C3 PowerShell2 Rust2 Batchfile1 C++1 HTML1 Jupyter Notebook1

Sort:Most stars

Sort options

Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

BishopFox /sliver

Star10.3k

Adversary Emulation Framework

dns golang http gplv3 dns-server sliver red-team security-tools c2 red-team-engagement command-and-control implant adversarial-attacks red-teaming adversary-simulation

UpdatedNov 24, 2025
Go

mvelazc0 /PurpleSharp

Star833

PurpleSharp is a C# adversary simulation tool that executes adversary techniques with the purpose of generating attack telemetry in monitored Windows environments

purple-team adversary-simulation detection-engineering controls-validation

UpdatedDec 17, 2024
C#

S3N4T0R-0X0 /APTs-Adversary-Simulation

Star769

This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom tools, C2 servers, backdoors, exploitation techniques, stagers, bootloaders, and other malicious artifacts that mirror those used in real world attacks .

apt adversarial-attacks adversary-emulation adversary-simulation cozy-bear fancy-bear bear-c2 energetic-bear voodoo-bear berserk-bear gossamer-bear primitive-bear ember-bear venomous-bear labyrinth-chollima velvet-chollima famous-chollima stardust-chollima mustang-panda wicked-panda

UpdatedNov 22, 2025
C++

ch33r10 /EnterprisePurpleTeaming

Star668

Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study by Xena Olsen.

red-team adversary redteam adversary-emulation purpleteam purple-team adversary-simulation adversaryemulation

UpdatedJun 14, 2023

zarkones /XENA

Star375

XENA is an innovative C2 made fully in Go. With hacking automation features.

golang remote-control botnet xena pentesting post-exploitation remote-access red-team remote-admin-tool c2 adversary-simulation

UpdatedApr 26, 2025
Go

redcanaryco /chain-reactor

Star322

Chain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.

linux security elf mitre security-testing mitre-attack adversary-simulation

UpdatedApr 8, 2025
C

0xflux /Wyrm

Star320

The dragon in the dark. A red team post exploitation framework for testing security controls during red team assessments.

rust pentesting pentest red-team wyrm security-tools c2 command-and-control red-teaming adversary-emulation adversary-simulation

UpdatedNov 28, 2025
Rust

mvelazc0 /msInvader

Star318

M365/Azure adversary simulation tool that generates realistic attack telemetry to help blue teams improve their detection and response capabilities.

threat-hunting purple-team adversary-simulation

UpdatedOct 12, 2025
Python

WesleyWong420 /OPSEC-Tradecraft

Star317

Collection of OPSEC Tradecraft and TTPs for Red Team Operations

opsec red-teaming adversary-simulation

UpdatedNov 24, 2025
PowerShell

Ixve /Red-Team-Tools

Star208

Repo containing cracked red teaming tools.

remote-control backdoor trojan penetration-testing rat pentesting pentest red-team backdoors c2 pentest-tool adversary command-and-control red-teaming adversary-emulation pentest-tools penetration-testing-tools adversary-simulation red-team-tools red-teaming-tools

UpdatedNov 5, 2025
Batchfile

zarkones /OnionC2

Star148

C2 writen in Rust & Go powered by Tor network.

remote-control botnet tor hacking xena pentesting onion remote-access red-team c2 adversary-simulation

UpdatedOct 30, 2025
Vue

tijme /amd-ryzen-master-driver-v17-exploit

Sponsor

Star148

Cobalt Strike (CS) Beacon Object File (BOF) for kernel exploitation using AMD's Ryzen Master Driver (version 17).

kernel exploit beacon cobalt-strike bof red-teaming adversary-simulation cve-2020-12928

UpdatedJan 21, 2023
C

PhrozenIO /SharpShellPipe

Star120

This lightweight C# demo application showcases interactive remote shell access via named pipes and the SMB protocol.

shell remote-control csharp smb infosec remote-shell offensive-security redteam namedpipe adversary-simulation namedpipes

UpdatedFeb 21, 2025
C#

PhrozenIO /SharpFtpC2

Star87

A Streamlined FTP-Driven Command and Control Conduit for Interconnecting Remote Systems.

microsoft windows csharp ftp infosec ftp-client c2 redteam adversary-simulation

UpdatedNov 9, 2023
C#

Sam0x90 /CTI

Star83

Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on

cti threat-intelligence adversary-emulation purpleteam adversary-simulation

UpdatedApr 27, 2024
PowerShell

ssnkhan /adversarial-threat-modelling

Star70

Supporting materials for my "Intelligence-Led Adversarial Threat Modelling with VECTR" workshop

cti dora blueteam threat-intelligence redteam mitre-attack adversary-emulation purpleteam adversary-simulation tiber-eu cbest

UpdatedNov 17, 2025
Jupyter Notebook

MythicStack /Python-Security-Tool-Database

Star55

Solid Python toolkit for those in the security industry. Some by me, most by smarter people.

python osint hacking cybersecurity infosec awesome-list information-gathering security-tools adversary-emulation penetration-testing-tools adversary-simulation

UpdatedJan 20, 2025

mvelazc0 /PurpleSpray

Star51

PurpleSpray is an adversary simulation tool that executes password spray behavior under different scenarios and conditions with the purpose of generating attack telemetry in properly monitored Windows enterprise environments

purpleteam password-spray adversary-simulation