A tool matrix for Russian APTs based on the Ransomware Tool Matrix
☆242Aug 20, 2025Updated last year
Alternatives and similar repositories for Russian-APT-Tool-Matrix
Users that are interested in Russian-APT-Tool-Matrix are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A resource containing all the tools each ransomware gangs uses☆1,453Aug 29, 2026Updated last month
- This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom …☆1,146Sep 21, 2026Updated 2 weeks ago
- A collection of CVEs weaponized by ransomware operators☆153Aug 30, 2026Updated last month
- BEAR-C2 is an adversary simulation and emulation framework built around real-world TTPs inspired by Russian, Chinese, North Korean, and I…☆699Updated this week
- Hundred Days of Yara Challenge☆12Jun 21, 2022Updated 4 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ShellSweeping the evil.☆185Jul 22, 2026Updated 2 months ago
- A collection of companies that disclose adversary TTPs after they have been breached☆305Sep 20, 2026Updated 3 weeks ago
- Browser extension blocking scam and phishing pages https://chromewebstore.google.com/detail/nehboro/ljgklnaofelbcnegjniagpmjknkmaiom☆16Apr 22, 2026Updated 5 months ago
- ☆16May 3, 2024Updated 2 years ago
- A PoC to Simulate Ransomware Attack on AWS Environment☆33Oct 14, 2024Updated last year
- IOCs collected during day-to-day activities☆151Updated this week
- Live Feed of C2 servers, tools, and botnets☆786Apr 13, 2026Updated 5 months ago
- Leverage WindowsApp createdump tool to obtain an lsass dump☆148Sep 20, 2024Updated 2 years ago
- Tricard - Malware Sandbox Fingerprinting☆24Dec 11, 2023Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Threat Hunt Investigation Methodology and Procedure☆15Jul 11, 2022Updated 4 years ago
- ☆60Oct 24, 2024Updated last year
- ↕️🤫 Stealth redirector for your red team operation security☆1,117Jul 20, 2026Updated 2 months ago
- ☆22Oct 2, 2025Updated last year
- ☆31Feb 28, 2025Updated last year
- Living off the False Positive!☆43Apr 3, 2026Updated 6 months ago
- SpicyAD is a C# Active Directory penetration testing tool designed for authorized security assessments. It combines multiple AD attack te…☆108Sep 9, 2026Updated last month
- Quick test for CVE-2023-26025 behaviours☆13Nov 29, 2023Updated 2 years ago
- Public Repository of Open Source Tools for Cyber Threat Intelligence Analysts and Researchers☆831Feb 8, 2026Updated 8 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- An analytical challenge created to test junior analysts looking to try performing proactive and reactive cyber threat intelligence.☆202Jul 3, 2024Updated 2 years ago
- Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase.☆788Jun 23, 2023Updated 3 years ago
- ☆11Jun 12, 2023Updated 3 years ago
- PowerShell tools to help defenders hunt smarter, hunt harder.☆490Oct 29, 2025Updated 11 months ago
- Ansible/Vagrant/Packer files to create a virtual machine with the tooling needed to perform cloud security assessments☆147Jan 2, 2025Updated last year
- A Red Team Activity Hub☆243Updated this week
- Extracted Yara rules from Windows Defender mpavbase and mpasbase☆537May 14, 2026Updated 4 months ago
- Anvilogic Forge☆119Mar 31, 2026Updated 6 months ago
- Automatically created C2 Feeds☆745Updated this week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Nuke It From Orbit - remove AV/EDR with physical access☆273Dec 8, 2024Updated last year
- A repository of credential stealer formats☆259Jun 10, 2025Updated last year
- ☆30Jan 13, 2026Updated 8 months ago
- .NET post-exploitation toolkit for Active Directory reconnaissance and exploitation☆400Jul 23, 2025Updated last year
- Everything related to YARA☆16Apr 18, 2026Updated 5 months ago
- This repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports☆83Sep 28, 2026Updated last week
- ☆19Aug 26, 2020Updated 6 years ago