This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom tools, C2 servers, backdoors, exploitation techniques, stagers, bootloaders, and other malicious artifacts that mirror those used in real world attacks .
☆1,096Jul 27, 2026Updated this week
Alternatives and similar repositories for APTs-Adversary-Simulation
Users that are interested in APTs-Adversary-Simulation are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Bear C2 is a compilation of C2 scripts, payloads, and stagers used in simulated attacks by Russian APT groups, Bear features a variety of…☆528Jun 9, 2026Updated last month
- A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive …☆1,497May 5, 2026Updated 2 months ago
- This comprehensive process injection series is crafted for cybersecurity enthusiasts, researchers, and professionals who aim to stay at t…☆459Jun 10, 2026Updated last month
- AppLocker-Based EDR Neutralization☆340Dec 19, 2025Updated 7 months ago
- ☆721Jul 9, 2026Updated 2 weeks ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- AdaptixC2 is a highly modular advanced redteam toolkit☆3,426Updated this week
- Evasion kit for Cobalt Strike☆481Jun 5, 2026Updated last month
- The dragon in the dark. A red team post exploitation framework for testing security controls during red team assessments.☆511Mar 15, 2026Updated 4 months ago
- Lab used for workshop and CTF☆527Feb 3, 2026Updated 5 months ago
- C2-agnostic BOF collection, categorized by attack chain phase. Designed to be small and modular, allowing for quick execution and automat…☆312Jul 5, 2026Updated 3 weeks ago
- EDR-Freeze is a tool that puts a process of EDR, AntiMalware into a coma state.☆858May 23, 2026Updated 2 months ago
- A resource containing all the tools each ransomware gangs uses☆1,418Updated this week
- Simulate the behavior of AV/EDR for malware development training.☆568Feb 15, 2024Updated 2 years ago
- Windows protocol library, including SMB and RPC implementations, among others.☆810Jul 14, 2026Updated 2 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- C2 infrastructure over Microsoft Teams.☆756Jan 15, 2025Updated last year
- ↕️🤫 Stealth redirector for your red team operation security☆1,098Jul 20, 2026Updated last week
- Extract and execute a PE embedded within a PNG file using an LNK file.☆477Nov 2, 2024Updated last year
- A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage Power…☆823Mar 28, 2025Updated last year
- This map lists the essential techniques to bypass anti-virus and EDR☆3,366Mar 28, 2025Updated last year
- A tool to transform Chromium browsers into a C2 Implant☆593Dec 17, 2025Updated 7 months ago
- Mapping of open-source detection rules and atomic tests.☆214Jul 15, 2026Updated last week
- A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the …☆1,896Nov 3, 2024Updated last year
- Advanced Active Directory network topology analyzer with SMB validation, multiple authentication methods (password/NTLM/Kerberos), and co…☆780May 16, 2026Updated 2 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Abusing Azure services over C2☆378Jan 20, 2026Updated 6 months ago
- EDR Lab for Experimentation Purposes☆1,524Jun 10, 2026Updated last month
- M365/Azure adversary simulation tool that generates realistic attack telemetry to help blue teams improve their detection and response ca…☆330Oct 12, 2025Updated 9 months ago
- RunAs Utility Credential Stealer implementing 3 techniques : Hooking CreateProcessWithLogonW, Smart Keylogging, Remote Debugging☆210Mar 6, 2025Updated last year
- Run TTPs, with AI!☆140Feb 23, 2026Updated 5 months ago
- AI Red Teaming playground labs to run AI Red Teaming trainings including infrastructure.☆2,023Feb 13, 2026Updated 5 months ago
- RedInfraCraft automates the deployment of powerful red team infrastructures! It streamlines the setup of C2s, makes it easy to create adv…☆233Mar 28, 2025Updated last year
- Conquest is a feature-rich and malleable command & control/post-exploitation framework developed in Nim.☆412Updated this week
- PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS.☆609Jan 20, 2026Updated 6 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird …☆803Jan 26, 2026Updated 6 months ago
- ☆169Mar 4, 2025Updated last year
- ☆251Mar 29, 2025Updated last year
- Awesome EDR Bypass Resources For Ethical Hacking☆1,552Jan 26, 2026Updated 6 months ago
- game of active directory☆8,089Mar 12, 2026Updated 4 months ago
- Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking☆459Jun 27, 2025Updated last year
- Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsing history, and book…☆559Jan 8, 2026Updated 6 months ago