adversary-emulation 开源项目推荐（175 个）

apache /caldera

Automated Adversary Emulation Platform

guardicore /monkey

Infection Monkey - An open-source adversary emulation platform

DataDog /stratus-red-team

☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

center-for-threat-informed-defense /adversary_emulation_library

一个开放的对手模拟计划库，旨在使组织能够基于现实世界的TTP测试其防御。

OpenAEV-Platform /openaev

Open Adversarial Exposure Validation Platform

S3N4T0R-0X0 /APTs-Adversary-Simulation

This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom tools, C2 servers, backdoors, exploitation techniques, stagers, bootloaders, and other malicious artifacts that mirror those used in real world attacks.

nshalabi /ATTACK-Tools

Utilities for MITRE™ ATT&CK

DataDog /KubeHound

Tool for building Kubernetes attack paths

S3N4T0R-0X0 /BEAR-C2

BEAR-C2 is an adversary simulation and emulation framework built around real-world TTPs inspired by Russian, Chinese, North Korean, and Iranian APT groups.

ch33r10 /EnterprisePurpleTeaming

Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study by Xena Olsen.

KeyValueSoftwareSystems /agent-opfor

Open-source adversary emulation for AI agents and MCP servers.

0xflux /Wyrm

The dragon in the dark. A red team post exploitation framework for testing security controls during red team assessments.

vectra-ai-research /MAAD-AF

MAAD 攻击框架——一款用于简单、快速且有效的 M365 和 Entra ID（Azure AD）安全测试的攻击工具。

NVISOsecurity /cyber-security-llm-agents

A collection of agents that use Large Language Models (LLMs) to perform tasks common on our day to day jobs in cyber security.

f1zm0 /hades

Go shellcode loader that combines multiple evasion techniques

f1zm0 /acheron

indirect syscalls for AV/EDR evasion in Go assembly

mitre /caldera-ot

MITRE Caldera™ for OT Plugins & Capabilities

Ixve /Red-Team-Tools

Repo containing cracked red teaming tools.

dstours /OctoC2

GitHub-native command-and-control framework for authorized security research, with encrypted multi-channel transport and resilient failover.

devZero-Security /redStackPRO

Compose red team infrastructure and Active Directory ranges on a canvas, then compile to a complete Terraform and Ansible working directory you run yourself. Validate TTPs and tooling at production-ops level. GCP, AWS, and Azure.