A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
☆367Feb 7, 2019Updated 7 years ago
Alternatives and similar repositories for Invoke-ATTACKAPI
Users that are interested in Invoke-ATTACKAPI are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Utilities for MITRE™ ATT&CK☆1,056Jan 3, 2026Updated 9 months ago
- ☆1,101May 1, 2019Updated 7 years ago
- ☆350Mar 19, 2021Updated 5 years ago
- An information security preparedness tool to do adversarial simulation.☆1,148Apr 1, 2019Updated 7 years ago
- Automated, Collection, and Enrichment Platform☆324Nov 14, 2019Updated 6 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more e…☆4,701Jan 12, 2026Updated 9 months ago
- Remote Recon and Collection☆461Nov 23, 2017Updated 8 years ago
- Python Script to access ATT&CK content available in STIX via a public TAXII server☆571Dec 19, 2025Updated 10 months ago
- Virtual Machine for Adversary Emulation and Threat Hunting☆1,319Jan 22, 2025Updated last year
- A PowerShell script for helping to find vulnerable settings in AD Group Policy. (deprecated, use Grouper2 instead!)☆731Feb 5, 2019Updated 7 years ago
- "Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security …☆1,043May 27, 2020Updated 6 years ago
- CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across al…☆657Aug 19, 2019Updated 7 years ago
- Powershell C2 Server and Implants☆574Nov 11, 2019Updated 6 years ago
- Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)☆1,614Dec 10, 2018Updated 7 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- The project is called Great SCT (Great Scott). Great SCT is an open source project to generate application white list bypasses. This tool…☆1,123Feb 10, 2021Updated 5 years ago
- Enumerate usernames on a domain where you have no creds by using SMB Relay with low priv.☆400May 20, 2020Updated 6 years ago
- A few scripts I put together for testing purposes and to automate a few capabilities while doing IR. These scripts are also part of my bl…☆53Jan 24, 2018Updated 8 years ago
- Some PowerShell Stuff☆279Jun 15, 2022Updated 4 years ago
- ☆107Mar 21, 2017Updated 9 years ago
- GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.☆632Jun 20, 2017Updated 9 years ago
- CACTUSTORCH: Payload Generation for Adversary Simulations☆1,015Jul 3, 2018Updated 8 years ago
- PowerShell Remote Download Cradle Generator & Obfuscator☆853Mar 23, 2018Updated 8 years ago
- This repo is for WMIOps, a powershell script which uses WMI for various purposes across a network.☆383Jun 25, 2024Updated 2 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Forward local or remote tcp ports through SMB pipes.☆294Mar 7, 2021Updated 5 years ago
- A toolset to make a system look as if it was the victim of an APT attack☆2,784Sep 23, 2025Updated last year
- PowerShell Obfuscation Detection Framework☆757Dec 1, 2023Updated 2 years ago
- Aggressor scripts I've made for Cobalt Strike☆413Jul 29, 2023Updated 3 years ago
- Monitors for DCSYNC and DCSHADOW attacks and create custom Windows Events for these events.☆141Mar 7, 2018Updated 8 years ago
- Splunk Dashboard for CobaltStrike logs☆90Mar 16, 2021Updated 5 years ago
- A collection of PowerShell Modules for BloodHound/Empire Orchestration☆109Sep 26, 2017Updated 9 years ago
- PowerShell Runspace Post Exploitation Toolkit☆1,552Aug 2, 2019Updated 7 years ago
- random powershell goodness☆464Nov 21, 2024Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.☆946Dec 12, 2023Updated 2 years ago
- A Bring Your Own Land Toolkit that Doubles as a WMI Provider☆288Oct 31, 2018Updated 7 years ago
- PSAmsi is a tool for auditing and defeating AMSI signatures.☆398Apr 22, 2018Updated 8 years ago
- PowerShell Pass The Hash Utils☆1,812Dec 9, 2018Updated 7 years ago
- SMB MiTM tool with a focus on attacking clients through file content swapping, lnk swapping, as well as compromising any data passed over…☆381Aug 17, 2018Updated 8 years ago
- DoHC2 allows the ExternalC2 library from Ryan Hanson (https://github.com/ryhanson/ExternalC2) to be leveraged for command and control (C2…☆447Aug 7, 2020Updated 6 years ago
- Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS☆1,692Oct 11, 2018Updated 8 years ago