Alternatives and similar repositories for Blue

Users that are interested in Blue are comparing it to the libraries listed below

• N0vaSky / NovaEDR-deploy
  ☆73Updated 2 weeks ago
• synacktiv / ntdissector
  ☆150Updated last month
• MazX0p / CobaltSentry
  ☆24Updated 5 months ago
• mlcsec / Graphpython
  Modular cross-platform Microsoft Graph API (Entra, o365, and Intune) enumeration and exploitation toolkit
  ☆150Updated 7 months ago
• cbecks2 / edr-artifacts
  This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.
  ☆89Updated 11 months ago
• yehia-mamdouh / ZeroProbe
  ZeroProbe is an advanced enumeration and analysis framework designed for exploit developers, security researchers, and red teamers. It pr…
  ☆105Updated 4 months ago
• LuemmelSec / APEX
  Azure Post Exploitation Framework
  ☆203Updated 5 months ago
• amjcyber / pwnlook
  An offensive postexploitation tool that will give you complete control over the Outlook desktop application and therefore to the emails c…
  ☆167Updated 9 months ago
• CCob / Shwmae
  ☆156Updated 6 months ago
• joey-melo / netcredz
  With zero dependencies, NetCredz extracts credentials from pcap files or live traffic, supporting NTLM, LDAP, HTTP, SMTP, SNMP, Telnet, F…
  ☆67Updated 8 months ago
• LuemmelSec / Custom-BloodHound-Queries
  ☆179Updated 8 months ago
• absolomb / FindMeAccess
  ☆101Updated 3 weeks ago
• infosecn1nja / VeilTransfer
  VeilTransfer is a data exfiltration utility designed to test and enhance the detection capabilities. This tool simulates real-world data …
  ☆144Updated last week
• emiliensocchi / azurehound-queries
  🌩️ Collection of BloodHound queries for Azure
  ☆75Updated 6 months ago
• badsectorlabs / sccm-http-looter
  Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)
  ☆190Updated 10 months ago
• SpecterOps / BloodHoundQueryLibrary
  A community-driven collection of BloodHound queries
  ☆111Updated last month
• jfmaes / aws_mini_ad
  An Infrastructure as code proof of concept to deploy a bare minimum AD environment in AWS.
  ☆39Updated 3 weeks ago
• Sam0x90 / CTI
  Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on
  ☆82Updated last year
• S3N4T0R-0X0 / APT28-Adversary-Simulation
  This is a simulation of attack by Fancy Bear group (APT28) targeting high-ranking government officials Western Asia and Eastern Europe
  ☆34Updated last year
• nasbench / Misc-Research
  A collection of tools, scripts and personal research
  ☆140Updated last month
• cybrly / badsuccessor
  ☆112Updated 2 months ago
• zh54321 / SnafflerParser
  Parses Snaffler output file and generate beautified outputs.
  ☆106Updated 6 months ago
• denniskniep / DeviceCodePhishing
  This is a novel technique that leverages the well-known Device Code phishing approach. It dynamically initiates the flow when the victim …
  ☆165Updated 3 months ago
• Malcrove / SeamlessPass
  A tool leveraging Kerberos tickets to get Microsoft 365 access tokens using Seamless SSO
  ☆181Updated 11 months ago
• trustedsec / specula
  ☆203Updated last month
• bagelByt3s / LudusHound
  LudusHound is a tool for red and blue teams that transforms BloodHound data into a fully functional, Active Directory replica environment…
  ☆237Updated 2 weeks ago
• infosecn1nja / Invoke-AtomicAssessment
  Invoke-AtomicAssessment is a powerful tool designed to facilitate adversary emulation by leveraging Atomic Red Team.
  ☆42Updated 6 months ago
• SafeBreach-Labs / DoubleDrive
  A fully-undetectable ransomware that utilizes OneDrive & Google Drive to encrypt target local files
  ☆126Updated last year
• Leo4j / Invoke-SMBRemoting
  Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement
  ☆174Updated 2 months ago
• dirkjanm / roadtools_hybrid
  Hybrid AD utilities for ROADtools
  ☆84Updated 2 months ago