BishopFox / sliver

Adversary Emulation Framework

apache / caldera

Automated Adversary Emulation Platform

OpenAEV-Platform / openaev

Open Adversarial Exposure Validation Platform

DataDog / KubeHound

Tool for building Kubernetes attack paths

nealbridges / VulnHunter

Agentic AI security scanner that hunts exploitable vulnerabilities like an adversary, proves them with executable PoCs, and fixes them test-first. A maintained fork of Capital One's VulnHunter, rebuilt for any agent harness.

S3N4T0R-0X0 / BEAR-C2

BEAR-C2 is an adversary simulation and emulation framework built around real-world TTPs inspired by Russian, Chinese, North Korean, and Iranian APT groups.

splunk / attack_range

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

DataDog / stratus-red-team

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

S3N4T0R-0X0 / APTs-Adversary-Simulation

This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom tools, C2 servers, backdoors, exploitation techniques, stagers, bootloaders, and other malicious artifacts that mirror those used in real world attacks.

MISP / misp-galaxy

Clusters and elements to attach to MISP events or attributes (like threat actors)

KeyValueSoftwareSystems / agent-opfor

Open-source adversary emulation for AI agents and MCP servers.

joshuagodwin7929 / Purple-Team-Automation

Automated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK.

g13net / lockjaw

Rust based C2 Framework

stillbigjosh / adaptix-serverless-c2

Serverless C2 transport plugin for AdaptixC2 v1.2 using AWS Lambda + DynamoDB as the relay infrastructure.