This is a simulation of attack by Fancy Bear group (APT28) targeting high-ranking government officials Western Asia and Eastern Europe
☆36Jun 12, 2024Updated 2 years ago
Alternatives and similar repositories for APT28-Adversary-Simulation
Users that are interested in APT28-Adversary-Simulation are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This is a simulation of attack by the Cozy Bear group (APT-29) targeting diplomatic missions☆49Jun 12, 2024Updated 2 years ago
- Payload Generation Workflow☆41Jul 18, 2025Updated last year
- Windows capability development using GCC and GNU Make☆23Nov 1, 2025Updated last year
- Process Injection Techniques using DIrect and Indirect Syscalls☆11Dec 6, 2024Updated last year
- An improvement and a different approach to Mockingjay Self-Injection.☆34May 21, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A browser-based Digital Forensics and Incident Response (DFIR) tool for parsing, analyzing, and triaging FortiGate firewall logs.☆12Apr 11, 2026Updated 7 months ago
- Extra cmdlets to help with quering security related information from Azure☆15Jul 28, 2026Updated 3 months ago
- This is a simulation of attack by (Ember Bear) APT group targeting energy Organizations in Ukraine the attack campaign was active from le…☆12Jul 4, 2024Updated 2 years ago
- ADSIsearch is a Beacon Object File (BOF) to query Active Directory using ADDS, ADSI, and Network Management WinAPIs.☆10Feb 23, 2025Updated last year
- Mythic C2 wrapper for NimSyscallPacker☆26Mar 12, 2025Updated last year
- Sleep obfuscation proof of concept using Tp* WINAPI functions☆14Feb 4, 2025Updated last year
- A tool to assist DLL hijacking via the Havoc GUI☆14Jan 9, 2024Updated 2 years ago
- ☆15Sep 26, 2023Updated 3 years ago
- Decrypts and extracts tokens from TokenBroker cache files in Windows☆14May 20, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- all random stuff that dont warrant a seperate repo☆12Sep 2, 2022Updated 4 years ago
- Direct syscalls Injection to bypass AV/EDR☆10May 18, 2024Updated 2 years ago
- Terminate AV/EDR processes by exploiting the vulnerable NsecSoft driver☆32Sep 15, 2025Updated last year
- This operational dashboard correlates data from Microsoft Defender for Endpoint/Server (MDE) and Azure Monitor Agent (AMA) to identify co…☆19Oct 30, 2026Updated last week
- PS-TrustedDocuments: PowerShell script to handle information on trusted documents for Microsoft Office☆38Mar 15, 2023Updated 3 years ago
- A curated list of blogs, videos, tutorials, code, tools, scripts, and anything useful to help you learn Azure Policy - by @JesseLoudon☆12Jan 20, 2022Updated 4 years ago
- A simple, single authentication library for several languages☆14Nov 5, 2025Updated last year
- Small Python tool to do DLL Sideloading (and consequently, other DLL attacks).☆57Oct 10, 2022Updated 4 years ago
- A C# implementation that disables Windows Firewall bypassing UAC☆17Oct 23, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A basic exemple of the API-Hashing method used by Red Teamers but also by malwares developers in C++☆36Jan 10, 2024Updated 2 years ago
- Creating a Bind Shell in C☆20Aug 21, 2023Updated 3 years ago
- ☆25Nov 7, 2023Updated 3 years ago
- ☆55May 31, 2025Updated last year
- Red Team Hackery & Web p0wn☆15Updated this week
- Zirezamin – A real-time earthquake map of Iran, visualizing recent seismic activities with an intuitive and engaging interface. Stay info…☆12Feb 14, 2026Updated 8 months ago
- Note during self-study OSEP course from the Internet.☆12Aug 25, 2024Updated 2 years ago
- An HTA Application which builds Azure (Entra) Scenarios for Red Team Simulations☆63Aug 18, 2025Updated last year
- sl0ppy-PrivescTaskCreator.ps1☆41Nov 4, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Next-Gen Data Classification and Encryption☆15Jan 29, 2025Updated last year
- Terminate AV/EDR leveraging BYOVD attack☆105Mar 21, 2025Updated last year
- SVG Analysis and generation tools for commonly seen SVG attachment phishing☆57Sep 24, 2025Updated last year
- Windfall - Unauthenticated RCE exploit chain for Windmill & Nextcloud Flow (CVE-2026-29059). Path traversal + credential leak + PostgreSQ…☆18Apr 7, 2026Updated 7 months ago
- Brute Ratel LDAP filtering and sorting tool. Easily take BR log output and pull hostnames for ease of use with other red team tooling. Su…☆39Nov 16, 2023Updated 2 years ago
- Engine for analyzing binaries on macOS systems to identify potential vulnerabilities☆12Jul 6, 2024Updated 2 years ago
- This is a simulation of attack by (Voodoo Bear) APT group targeting entities in Eastern Europe the attack campaign was active as early as…☆12Jun 19, 2024Updated 2 years ago
Are these results useful?