Lab4PurpleSec is a modular Purple Team homelab combining a vulnerable Active Directory environment (GOAD), a Docker-based web DMZ, pfSense + Suricata, and a Wazuh SIEM. It provides a realistic, open-source training environment for web exploitation, pivoting, Active Directory attacks, and Blue Team detection.
☆333Oct 26, 2026Updated last week
Alternatives and similar repositories for Lab4PurpleSec
Users that are interested in Lab4PurpleSec are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Active Directory Vulnerability Scanner☆485Mar 3, 2026Updated 8 months ago
- A modern Python-based Red Team Operations Workbench for managing engagements, intelligence, evidence, and reporting.☆16Aug 26, 2026Updated 2 months ago
- A canvas for red team infrastructure and cyber ranges. Compose a topology, export runnable Terraform and Ansible, and deploy it yourself.…☆169Oct 6, 2026Updated 3 weeks ago
- A Windows tool that converts LDIF files to BloodHound CE☆34Dec 20, 2025Updated 10 months ago
- Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.☆247Aug 9, 2026Updated 2 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A collection of practical SOC investigation playbooks for common security alerts including brute-force attacks, phishing incidents, suspi…☆20Mar 15, 2026Updated 7 months ago
- Active Directory pentest methodology for Claude Code: skills, agents and slash commands for internal AD red-team work (Kerberoasting, ADC…☆215Aug 24, 2026Updated 2 months ago
- GhostHound is a BloodHound OpenGraph extension that surfaces Active Directory tombstone reanimation as a first-class attack path, enumera…☆47Aug 9, 2026Updated 2 months ago
- LLM-native static vulnerability detection: point it at a repo and get a reviewable vuln report, the way a human auditor would.☆65Updated this week
- Advanced Active Directory network topology analyzer with SMB validation, multiple authentication methods (password/NTLM/Kerberos), and co…☆845May 16, 2026Updated 5 months ago
- A Bloodhound alternative. BloodBash will ingest the same files bloodhound does but no server is required to use this tool. It's great for…☆501Oct 26, 2026Updated last week
- Free educational content on reverse engineering and malware analysis from the FLARE team☆1,790Mar 31, 2026Updated 7 months ago
- EvilMist is a collection of scripts and utilities designed to support cloud penetration testing & red teaming. The toolkit helps identify…☆170Feb 25, 2026Updated 8 months ago
- MDE/MDI Defender setup for Ludus☆62Jul 30, 2026Updated 3 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Two WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens☆255Mar 4, 2026Updated 7 months ago
- Automated Pass-the-Ticket (PtT) attack. Standalone alternative to Rubeus and Mimikatz for this attack. In C#, C++, Crystal, Python, Rust,…☆158Aug 31, 2026Updated 2 months ago
- Lab used for workshop and CTF☆541Updated this week
- A comprehensive modern architecture model is proposed to integrate platform solutions and tooling to support a professional Red Team.☆325Oct 26, 2026Updated last week
- Meet Mitsu, your chibi red-team operator. Connect your AI provider, set the scope, and she can take an authorized pentest from recon and …☆536Oct 24, 2026Updated last week
- Quick overview of the domain.☆60Apr 3, 2026Updated 7 months ago
- Active Directory information dumper via ADWS for evasion purposes.☆324Oct 12, 2026Updated 3 weeks ago
- Security automation with n8n ideas: 100+ Red/Blue/AppSec workflows, integrations, and ready-to-run playbooks.☆966Sep 20, 2025Updated last year
- Windows SSH Misconfiguration Discovery Tool - Map lateral movement paths through misconfigured SSH services in Active Directory environme…☆93May 11, 2026Updated 5 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Hunt Smarter, Hunt Harder☆201Mar 14, 2026Updated 7 months ago
- Simple LLM service identification - translate IP:Port to Ollama, vLLM, LiteLLM, or 60+ other AI services in seconds☆251Updated this week
- Workshop materials for “Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel” presented at DEF CON 34 and BSidesLV 20…☆397Aug 16, 2026Updated 2 months ago
- Extract Windows credentials directly from VM memory snapshots and virtual disks☆1,650Updated this week
- SANS Workshop: Active Directory Privilege Escalation with Empire!☆36Nov 12, 2025Updated 11 months ago
- The Mimikatz Missing Manual☆467Feb 5, 2026Updated 8 months ago
- PowerShell implementation for AD CS☆163Jul 30, 2026Updated 3 months ago
- Steal Net-NTLMv1 hashes for logged on users without dumping LSASS☆16May 11, 2026Updated 5 months ago
- Active Directory Cheat Sheet☆208May 7, 2021Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A personal RAG system for offensive security knowledge☆178Aug 11, 2026Updated 2 months ago
- Azure RedOps is a offensive security toolkit for assessing the security posture of Microsoft Entra ID☆187Oct 18, 2026Updated 2 weeks ago
- AI-powered modular Active Directory red-team framework for authorized penetration testing, AD enumeration, attack-path analysis, Kerber…☆390Oct 17, 2026Updated 2 weeks ago
- Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, passwor…☆784Updated this week
- BloodHound MCP Server☆13Apr 8, 2026Updated 6 months ago
- Dump LSASS via physical memory read primitives in vulnerable kernel drivers☆35Jul 23, 2026Updated 3 months ago
- Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path anal…☆457Updated this week