A Purple Team lab simulating Active Directory attacks (Kerberoasting, BloodHound, lateral movement) and implementing defensive hardening (gMSA, tiering, LLMNR/NetBIOS disabling) with Wazuh SIEM detection rules mapped to MITRE ATT&CK.
☆39Oct 7, 2026Updated last month
Alternatives and similar repositories for Active-Directory-Simulation-Attack-
Users that are interested in Active-Directory-Simulation-Attack- are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Automated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK.☆59Sep 25, 2026Updated last month
- ☆37Updated this week
- Attack techniques for threat emulation in VMware environments☆58Updated this week
- Interactive Active Directory shell and attack toolkit over LDAP(S) or ADWS (SOAP) written in Rust. 🦀☆19Updated this week
- Offensive SIEM☆59Oct 28, 2026Updated last week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Self-hosted multi-engine Sigma detection for event logs☆43Updated this week
- I’m building a hands‑on Security Operations Center (SOC) home lab from scratch and documenting my progress as I learn defensive security …☆17Updated this week
- A powerful Windows command-line tool for analyzing and searching ETW (Event Tracing for Windows) provider permissions from the Windows re…☆93Jul 29, 2025Updated last year
- A tiny infrastructure for Codex to solve CTF challenges in reverse engineering. 3rd in Flare-On 13.☆27Sep 26, 2026Updated last month
- A collection of techniques for process injection on Windows☆105Aug 16, 2026Updated 2 months ago
- Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/…☆67Aug 22, 2026Updated 2 months ago
- Ludus role for deploying a Mythic Teamserver onto Linux servers☆24Mar 16, 2025Updated last year
- A Windows tool that converts LDIF files to BloodHound CE☆34Dec 20, 2025Updated 10 months ago
- A monthly Windows PE baseline dataset for Cyber security researchers☆24Oct 30, 2026Updated last week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Ludus roles to deploy ASR rules and MDI auditing settings☆25Aug 5, 2025Updated last year
- ☆92Sep 19, 2026Updated last month
- Reverse engineering analysis of PureRAT, a multi-stage RAT that executes via msbuild.exe and communicates with C2 servers at pure8s.ddnsf…☆19Sep 21, 2026Updated last month
- This contains common OSCP local exploits and enumeration scripts☆12Sep 18, 2015Updated 11 years ago
- Outfits your ludus AD domain with BadBlood info.☆17Aug 5, 2025Updated last year
- Presentations from yours truely☆28Sep 11, 2026Updated last month
- A collection of PowerShell scripts designed to transform raw forensic data into formats suitable for analysis☆12Jan 18, 2026Updated 9 months ago
- Generator of docker-compose file to allow secure configurations and multi-deployment strategy.☆12Nov 7, 2023Updated 3 years ago
- BT ve siber güvenlik risk yönetimi platformu — risk envanteri, 5×5 değerlendirme, aksiyon takibi ve kurumsal raporlama. PHP 8.3 + MariaDB…☆34Sep 19, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A PoC tool for the Pass-ta-key Golden Attack, covering the extraction of the Google Password Manager Security Domain Secret from Chrome p…☆35Updated this week
- Collection Of Scripts And Utilities For Windows Event Hunting☆19Feb 20, 2020Updated 6 years ago
- CnaEmulator is a standalone, general-purpose development, emulation, and testing harness for Cobalt Strike Aggressor Scripts (.cna)☆22Sep 20, 2026Updated last month
- This repository contains scripts designed to streamline and simplify workflows for purple/blue/red teamers, making day-to-day operations …☆13Jul 18, 2026Updated 3 months ago
- Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal☆60Sep 15, 2026Updated last month
- Tool to aid in dumping LSASS process remotely☆43Sep 23, 2025Updated last year
- A tool to easily perform GitLab Device Code Phishing on red team engagements☆56Feb 9, 2026Updated 8 months ago
- Windows x64 API hashing library that bypasses EAF and resolves forwarded exports, ordinals, and api-ms-*/ext-ms-* API Set DLLs.☆70Oct 7, 2026Updated last month
- Cuban Eight is a red team tool that packages a Windows PE payload into a .wsl file spoofing a real Linux distro installer. Double-click t…☆33Oct 16, 2026Updated 3 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques☆132Dec 28, 2025Updated 10 months ago
- Compose red team infrastructure and Active Directory ranges on a canvas, then compile to a complete Terraform and Ansible working directo…☆173Updated this week
- Build guide for Red Teaming home lab. GOAD lab setup in Proxmox and pfSense, Operator/C2 and Redirectors.☆51Sep 26, 2026Updated last month
- Read-only Active Directory & Microsoft Entra ID hygiene auditor in pure PowerShell. Collect once, analyze offline: deterministic findings…☆23Updated this week
- Manual extremo de hacking ético: técnicas, exploits y estrategias reales para pentesters, con enfoque práctico y visión profesional.☆11Aug 17, 2025Updated last year
- Track C2 servers, tools, and botnets over time by framework and location☆16Aug 17, 2025Updated last year
- A blue team tool to help audit kerberoasting vulnerability status☆23Jan 31, 2026Updated 9 months ago