☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

PurpleSharp is a C# adversary simulation tool that executes adversary techniques with the purpose of generating attack telemetry in monitored Windows environments

Kubernetes Attack Graph

Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study by Xena Olsen.

AWS CloudSaga - Simulate security events in AWS

Slack enumeration and exposed secrets detection tool

Finding exposed secrets and personal data in GitLab

ARTi-C2 is a post-exploitation framework used to execute Atomic Red Team test cases with rapid payload deployment and execution capabilities via .NET's DLR.

Open Breach and Attack Simulation Platform

Automating EDR Testing with reference to MITRE ATTACK via Cobalt Strike [Purple Team].

A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.

M365/Azure adversary simulation tool designed to simulate adversary techniques and generate attack telemetry.

Monitoring GitHub for sensitive data shared publicly

CyberSec Resources: FRAMEWORKS & STANDARDS; Pentesting Audits & Hacking; PURPLE TEAMING, AD, API, web, clouds, CTF, OSINT, Pentest tools, Network Security, Privilege escalation, Exploiting, Reversing, Secure Code, Bug Bounty, ...

A happy place for detection engineers, purple teamers and threat hunters focusing on macOS.

Monitoring your Slack Enterprise Grid for sensitive information

A collection of cheat sheets and power commands.

CuteRAT is a stealthy remote access tool without any dependencies

An Information Security Reference That Doesn't Suck