☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

Tool for building Kubernetes attack paths

PurpleSharp is a C# adversary simulation tool that executes adversary techniques with the purpose of generating attack telemetry in monitored Windows environments

Open Breach and Attack Simulation Platform

Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study by Xena Olsen.

AWS CloudSaga - Simulate security events in AWS

Slack enumeration and exposed secrets detection tool

M365/Azure adversary simulation tool that generates realistic attack telemetry to help blue teams improve their detection and response capabilities.

Finding exposed secrets and personal data in GitLab

ARTi-C2 is a post-exploitation framework used to execute Atomic Red Team test cases with rapid payload deployment and execution capabilities via .NET's DLR.

Automating EDR Testing with reference to MITRE ATTACK via Cobalt Strike [Purple Team].

A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.

Monitoring GitHub for sensitive data shared publicly

ATT&CK Evaluations Library

A simple tool designed to create Atomic Red Team tests with ease.

CyberSec Resources: FRAMEWORKS & STANDARDS; Pentesting Audits & Hacking; PURPLE TEAMING, AD, API, web, clouds, CTF, OSINT, Pentest tools, Network Security, Privilege escalation, Exploiting, Reversing, Secure Code, Bug Bounty, ...

A cybersecurity resource library of knowledge documents, links to tools, and automation scripts.

A happy place for detection engineers, purple teamers and threat hunters focusing on macOS.

Monitoring your Slack Enterprise Grid for sensitive information