purpleteam 开源项目推荐（123 个）

LOLBAS-Project /LOLBAS

Living Off The Land 二进制文件和脚本 -（LOLBins 和 LOLScripts）

LasCC /HackTools

The all-in-one browser extension for offensive security professionals 🛠

api0cradle /UltimateAppLockerByPassList

The goal of this repository is to document the most common techniques to bypass AppLocker.

cyb3rxp /awesome-soc

A curated knowledge base to build, run and mature a SOC (including CSIRT).

api0cradle /LOLBAS

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

ahmedkhlief /APT-Hunter

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

PlumHound /PlumHound

蓝色和紫色团队的警犬报道

FalconForceTeam /FalconFriday

威胁狩猎查询与检测

scythe-io /purple-team-exercise-framework

Purple Team Exercise Framework

bluecapesecurity /PWF

Practical Windows Forensics Training

ch33r10 /EnterprisePurpleTeaming

Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study by Xena Olsen.

iknowjason /PurpleCloud

A little tool to play with Azure Identity - Azure and Entra ID lab creation tool. Blog: https://medium.com/@iknowjason/sentinel-for-purple-teaming-183b7df7a2f4

idnahacks /GoodHound

Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.

andreisss /KslDump

KslDump — Why bring your own knife when Defender already left one in the kitchen?

PaperMtn /slack-watchman

Slack enumeration and exposed secrets detection tool

cr0nx /awesome-linux-attack-forensics-purplelabs

This page is a result of the ongoing hands-on research around advanced Linux attacks, detection and forensics techniques and tools.

DefensiveOrigins /AtomicPurpleTeam

Atomic Purple Team Framework and Lifecycle

AnLoMinus /Diablo

Diablo ~ Hacking / Pentesting & Reporting

Ziconius /FudgeC2

FudgeC2 - a command and control framework designed for team collaboration and post-exploitation activities.

Viralmaniar /Remote-Desktop-Caching-

This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an attacker did on a compromised host. It is extremely u…