This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom tools, C2 servers, backdoors, exploitation techniques, stagers, bootloaders, and other malicious artifacts that mirror those used in real world attacks.
☆1,147Sep 21, 2026Updated 3 weeks ago
Alternatives and similar repositories for APTs-Adversary-Simulation
Users that are interested in APTs-Adversary-Simulation are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- BEAR-C2 is an adversary simulation and emulation framework built around real-world TTPs inspired by Russian, Chinese, North Korean, and I…☆703Updated this week
- A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive …☆1,551May 5, 2026Updated 5 months ago
- ☆731Aug 20, 2026Updated last month
- AppLocker-Based EDR Neutralization☆345Dec 19, 2025Updated 9 months ago
- AdaptixC2 is a highly modular advanced redteam toolkit☆3,767Oct 8, 2026Updated last week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- This comprehensive process injection series is crafted for cybersecurity enthusiasts, researchers, and professionals who aim to stay at t…☆469Jun 10, 2026Updated 4 months ago
- The dragon in the dark. A red team post exploitation framework for testing security controls during red team assessments.☆505Mar 15, 2026Updated 7 months ago
- Evasion kit for Cobalt Strike☆509Jun 5, 2026Updated 4 months ago
- A resource containing all the tools each ransomware gangs uses☆1,457Aug 29, 2026Updated last month
- C2-agnostic BOF collection, categorized by attack chain phase. Designed to be small and modular, allowing for quick execution and automat…☆319Aug 31, 2026Updated last month
- EDR-Freeze is a tool that puts a process of EDR, AntiMalware into a coma state.☆872May 23, 2026Updated 4 months ago
- Lab used for workshop and CTF☆539Aug 23, 2026Updated last month
- Simulate the behavior of AV/EDR for malware development training.☆566Feb 15, 2024Updated 2 years ago
- Windows protocol library, including SMB and RPC implementations, among others.☆842Oct 5, 2026Updated last week
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- This map lists the essential techniques to bypass anti-virus and EDR☆3,479Mar 28, 2025Updated last year
- C2 infrastructure over Microsoft Teams.☆758Jan 15, 2025Updated last year
- A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the …☆1,913Nov 3, 2024Updated last year
- Advanced Active Directory network topology analyzer with SMB validation, multiple authentication methods (password/NTLM/Kerberos), and co…☆842May 16, 2026Updated 5 months ago
- Abusing Azure services over C2☆384Jan 20, 2026Updated 8 months ago
- ↕️🤫 Stealth redirector for your red team operation security☆1,115Jul 20, 2026Updated 2 months ago
- RunAs Utility Credential Stealer implementing 3 techniques : Hooking CreateProcessWithLogonW, Smart Keylogging, Remote Debugging☆208Mar 6, 2025Updated last year
- EDR Lab for Experimentation Purposes☆1,577Jun 10, 2026Updated 4 months ago
- A tool to transform Chromium browsers into a C2 Implant☆607Dec 17, 2025Updated 10 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Conquest is a feature-rich and malleable command & control/post-exploitation framework developed in Nim.☆419Sep 3, 2026Updated last month
- Extract and execute a PE embedded within a PNG file using an LNK file.☆478Nov 2, 2024Updated last year
- Mapping of open-source detection rules and atomic tests.☆217Jul 15, 2026Updated 3 months ago
- A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage Power…☆820Mar 28, 2025Updated last year
- M365/Azure adversary simulation tool that generates realistic attack telemetry to help blue teams improve their detection and response ca…☆331Sep 2, 2026Updated last month
- Awesome EDR Bypass Resources For Ethical Hacking☆1,595Jan 26, 2026Updated 8 months ago
- RedInfraCraft automates the deployment of powerful red team infrastructures! It streamlines the setup of C2s, makes it easy to create adv…☆233Mar 28, 2025Updated last year
- Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird …☆810Jan 26, 2026Updated 8 months ago
- Run TTPs, with AI!☆143Feb 23, 2026Updated 7 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- I will be uploading all the codes which I created with the help either opensource projects or blogs. This is a step by step EDR learning …☆291Aug 1, 2025Updated last year
- Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!☆611Aug 17, 2026Updated 2 months ago
- AI Red Teaming playground labs to run AI Red Teaming trainings including infrastructure.☆2,094Feb 13, 2026Updated 8 months ago
- Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking☆467Jun 27, 2025Updated last year
- PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS.☆631Jan 20, 2026Updated 8 months ago
- ☆167Mar 4, 2025Updated last year
- Because AV evasion should be easy.☆910Nov 28, 2024Updated last year