This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom tools, C2 servers, backdoors, exploitation techniques, stagers, bootloaders, and other malicious artifacts that mirror those used in real world attacks.
☆1,161Oct 27, 2026Updated last week
Alternatives and similar repositories for APTs-Adversary-Simulation
Users that are interested in APTs-Adversary-Simulation are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- BEAR-C2 is an adversary simulation and emulation framework built around real-world TTPs inspired by Russian, Chinese, North Korean, and I…☆723Updated this week
- A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive …☆1,565May 5, 2026Updated 6 months ago
- ☆736Oct 19, 2026Updated 2 weeks ago
- Evasion kit for Cobalt Strike☆510Updated this week
- A resource containing all the tools each ransomware gangs uses☆1,466Aug 29, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- AdaptixC2 is a highly modular advanced redteam toolkit☆3,846Updated this week
- This map lists the essential techniques to bypass anti-virus and EDR☆3,483Mar 28, 2025Updated last year
- AppLocker-Based EDR Neutralization☆350Dec 19, 2025Updated 10 months ago
- C2-agnostic BOF collection, categorized by attack chain phase. Designed to be small and modular, allowing for quick execution and automat…☆321Oct 17, 2026Updated 2 weeks ago
- The dragon in the dark. A red team post exploitation framework for testing security controls during red team assessments.☆506Mar 15, 2026Updated 7 months ago
- This comprehensive process injection series is crafted for cybersecurity enthusiasts, researchers, and professionals who aim to stay at t…☆471Jun 10, 2026Updated 4 months ago
- EDR Lab for Experimentation Purposes☆1,581Jun 10, 2026Updated 4 months ago
- A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the …☆1,913Nov 3, 2024Updated 2 years ago
- Simulate the behavior of AV/EDR for malware development training.☆565Feb 15, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage Power…☆821Mar 28, 2025Updated last year
- Awesome EDR Bypass Resources For Ethical Hacking☆1,598Jan 26, 2026Updated 9 months ago
- Lab used for workshop and CTF☆542Oct 28, 2026Updated last week
- EDR-Freeze is a tool that puts a process of EDR, AntiMalware into a coma state.☆878May 23, 2026Updated 5 months ago
- Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird …☆816Jan 26, 2026Updated 9 months ago
- RunAs Utility Credential Stealer implementing 3 techniques : Hooking CreateProcessWithLogonW, Smart Keylogging, Remote Debugging☆208Mar 6, 2025Updated last year
- Windows protocol library, including SMB and RPC implementations, among others.☆846Oct 5, 2026Updated last month
- Advanced Active Directory network topology analyzer with SMB validation, multiple authentication methods (password/NTLM/Kerberos), and co…☆847May 16, 2026Updated 5 months ago
- Extract and execute a PE embedded within a PNG file using an LNK file.☆483Nov 2, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A tool to transform Chromium browsers into a C2 Implant☆613Dec 17, 2025Updated 10 months ago
- C2 infrastructure over Microsoft Teams.☆762Jan 15, 2025Updated last year
- ↕️🤫 Stealth redirector for your red team operation security☆1,121Jul 20, 2026Updated 3 months ago
- Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!☆612Aug 17, 2026Updated 2 months ago
- Mapping of open-source detection rules and atomic tests.☆218Jul 15, 2026Updated 3 months ago
- A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techni…☆1,426Oct 27, 2023Updated 3 years ago
- Abusing Azure services over C2☆382Jan 20, 2026Updated 9 months ago
- Conquest is a feature-rich and malleable command & control/post-exploitation framework developed in Nim.☆428Oct 27, 2026Updated last week
- ☆166Mar 4, 2025Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Run TTPs, with AI!☆144Feb 23, 2026Updated 8 months ago
- game of active directory☆8,582Oct 23, 2026Updated 2 weeks ago
- This project aims to compare and evaluate the telemetry of various EDR products.☆2,002Oct 30, 2026Updated last week
- M365/Azure adversary simulation tool that generates realistic attack telemetry to help blue teams improve their detection and response ca…☆332Sep 2, 2026Updated 2 months ago
- RedInfraCraft automates the deployment of powerful red team infrastructures! It streamlines the setup of C2s, makes it easy to create adv…☆233Mar 28, 2025Updated last year
- Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!)☆750Aug 17, 2026Updated 2 months ago
- I will be uploading all the codes which I created with the help either opensource projects or blogs. This is a step by step EDR learning …☆292Aug 1, 2025Updated last year