XMCyber / XMGoat
☆170Updated last year
Related projects ⓘ
Alternatives and complementary repositories for XMGoat
- Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.☆159Updated 3 weeks ago
- ☆133Updated last year
- Halberd : Multi-Cloud Attack Tool☆209Updated this week
- A tool to keep AWS pentests and red teams efficient, organized, and stealthy.☆89Updated 8 months ago
- Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.☆125Updated 2 years ago
- This provides a guided step by step walkthrough for threat modeling with MITRE ATT&CK Framework☆26Updated last year
- Identify Azure blobs using a wordlist of account name and container name strings☆32Updated 3 years ago
- Offensive security and Penetration Testing TTP for Cloud based environment (AWS / Azure / GCP)☆316Updated 3 weeks ago
- An automated Breach and Attack Simulation lab with terraform. Built for IaC stability, consistency, and speed.☆169Updated 4 months ago
- AHHHZURE is an automated deployment script that creates a vulnerable Azure cloud lab for offensive security practitioners and enthusiasts…☆101Updated 7 months ago
- This repo contains IOC, malware and malware analysis associated with Public cloud☆244Updated last week
- Enumeration/exploit/analysis/download/etc pentesting framework for GCP; modeled like Pacu for AWS; a product of numerous hours via @Webbi…☆209Updated 2 months ago
- DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation o…☆85Updated 10 months ago
- BadZure orchestrates the setup of Azure AD tenants, populating them with diverse entities while also introducing common security misconfi…☆425Updated 2 months ago
- A Azure Exploitation Toolkit for Red Team & Pentesters☆163Updated last year
- Tools and blogs I use to perform GCP red teams☆97Updated 4 months ago
- Blue Team detection lab created with Terraform and Ansible in Azure.☆143Updated this week
- ☆111Updated 3 years ago
- MAD ATT&CK Defender: ATT&CK Adversary Emulation Repository☆109Updated last year
- Ansible playbook to deploy a phishing engagement in the cloud.☆216Updated 2 years ago
- Playing around with Stratus Red Team (Cloud Attack simulation tool) and SumoLogic☆282Updated last year
- Top ATT&CK Techniques helps defenders approach the breadth and complexity of MITRE ATT&CK® with a prioritized top 10 list of techniques t…☆115Updated 3 months ago
- ForgeArmory provides TTPs that can be used with the TTPForge (https://github.com/facebookincubator/ttpforge).☆93Updated 2 months ago
- Purple Teaming Attack & Hunt Lab - Terraform☆158Updated 2 years ago
- Adversarial Interception Mission Oriented Discovery and Disruption Framework, or AIMOD2, is a structured threat hunting approach to proac…☆85Updated last year
- ☆31Updated last week
- Azure AD cheatsheet for the CARTP course☆97Updated 2 years ago
- The purpose of this project is to publish and maintain the deployment PowerShell script that automates deployments for Active Directory C…☆232Updated 11 months ago
- Open Threat Hunting Framework☆103Updated last year
- Canary Hunter aims to be a quick PowerShell script to check for Common Canaries in various formats generated for free on canarytokens.org☆102Updated 2 years ago