This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom tools, C2 servers, backdoors, exploitation techniques, stagers, bootloaders, and other malicious artifacts that mirror those used in real world attacks .
☆1,115Aug 3, 2026Updated 2 weeks ago
Alternatives and similar repositories for APTs-Adversary-Simulation
Users that are interested in APTs-Adversary-Simulation are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- BEAR-C2 is an adversary simulation and emulation framework built around real-world TTPs inspired by Russian, Chinese, North Korean, and I…☆533Updated this week
- A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive …☆1,517May 5, 2026Updated 3 months ago
- This comprehensive process injection series is crafted for cybersecurity enthusiasts, researchers, and professionals who aim to stay at t…☆462Jun 10, 2026Updated 2 months ago
- AppLocker-Based EDR Neutralization☆341Dec 19, 2025Updated 7 months ago
- ☆723Jul 9, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- AdaptixC2 is a highly modular advanced redteam toolkit☆3,514Aug 2, 2026Updated 2 weeks ago
- Evasion kit for Cobalt Strike☆487Jun 5, 2026Updated 2 months ago
- The dragon in the dark. A red team post exploitation framework for testing security controls during red team assessments.☆511Mar 15, 2026Updated 5 months ago
- Lab used for workshop and CTF☆528Feb 3, 2026Updated 6 months ago
- C2-agnostic BOF collection, categorized by attack chain phase. Designed to be small and modular, allowing for quick execution and automat…☆312Updated this week
- EDR-Freeze is a tool that puts a process of EDR, AntiMalware into a coma state.☆862May 23, 2026Updated 2 months ago
- A resource containing all the tools each ransomware gangs uses☆1,430Jul 25, 2026Updated 3 weeks ago
- Simulate the behavior of AV/EDR for malware development training.☆567Feb 15, 2024Updated 2 years ago
- Windows protocol library, including SMB and RPC implementations, among others.☆825Aug 5, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- C2 infrastructure over Microsoft Teams.☆758Jan 15, 2025Updated last year
- ↕️🤫 Stealth redirector for your red team operation security☆1,100Jul 20, 2026Updated 3 weeks ago
- Extract and execute a PE embedded within a PNG file using an LNK file.☆478Nov 2, 2024Updated last year
- A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage Power…☆821Mar 28, 2025Updated last year
- This map lists the essential techniques to bypass anti-virus and EDR☆3,431Mar 28, 2025Updated last year
- A tool to transform Chromium browsers into a C2 Implant☆597Dec 17, 2025Updated 8 months ago
- Mapping of open-source detection rules and atomic tests.☆215Jul 15, 2026Updated last month
- A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the …☆1,896Nov 3, 2024Updated last year
- Advanced Active Directory network topology analyzer with SMB validation, multiple authentication methods (password/NTLM/Kerberos), and co…☆825May 16, 2026Updated 3 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Abusing Azure services over C2☆380Jan 20, 2026Updated 6 months ago
- EDR Lab for Experimentation Purposes☆1,544Jun 10, 2026Updated 2 months ago
- M365/Azure adversary simulation tool that generates realistic attack telemetry to help blue teams improve their detection and response ca…☆330Oct 12, 2025Updated 10 months ago
- RunAs Utility Credential Stealer implementing 3 techniques : Hooking CreateProcessWithLogonW, Smart Keylogging, Remote Debugging☆209Mar 6, 2025Updated last year
- Run TTPs, with AI!☆140Feb 23, 2026Updated 5 months ago
- AI Red Teaming playground labs to run AI Red Teaming trainings including infrastructure.☆2,046Feb 13, 2026Updated 6 months ago
- RedInfraCraft automates the deployment of powerful red team infrastructures! It streamlines the setup of C2s, makes it easy to create adv…☆234Mar 28, 2025Updated last year
- Conquest is a feature-rich and malleable command & control/post-exploitation framework developed in Nim.☆418Updated this week
- PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS.☆612Jan 20, 2026Updated 6 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird …☆808Jan 26, 2026Updated 6 months ago
- ☆251Mar 29, 2025Updated last year
- ☆169Mar 4, 2025Updated last year
- Awesome EDR Bypass Resources For Ethical Hacking☆1,583Jan 26, 2026Updated 6 months ago
- game of active directory☆8,197Mar 12, 2026Updated 5 months ago
- Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking☆460Jun 27, 2025Updated last year
- Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsing history, and book…☆558Jan 8, 2026Updated 7 months ago