Awesome-Red-Teaming
Ghostwriter
| Awesome-Red-Teaming | Ghostwriter | |
|---|---|---|
| 8 | 2 | |
| 6,509 | 1,185 | |
| - | 1.7% | |
| 0.0 | 9.7 | |
| 4 months ago | 6 days ago | |
| Python | ||
| MIT License | BSD 3-clause "New" or "Revised" License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Awesome-Red-Teaming
- Career growth in cybersecurity
- i'm literally so far behind compared to everyone else!
- Any useful cybersecurity software under $5k?
-
Cybersecurity Repositories
Red Teaming
- Is there a cheat sheet of security tools and a small description of what they're used for?
-
Struggling to decide if I should take a low paying job offer or focus on studying for cybersecurity certificates. Any advice would be much appreciated.
Red Teaming / pen testing -- set up a home lab. Find a resource on the internet about how to learn red teaming and dig in. Example: https://github.com/yeyintminthuhtut/Awesome-Red-Teaming
-
Red Team Equipment for Budget Proposal
For software, pretty much everything you might need to start out is available as open source. Besides the actual testing stuff, don't forget to look at tools to facilitate collaboration + reporting (highly recommend looking at https://github.com/GhostManager/Ghostwriter). Also checkout: https://github.com/yeyintminthuhtut/Awesome-Red-Teaming
-
Looking for a mentor to show me what the industry in like
Pentesting is a tiny fraction of roles out of 10s of thousands and you're not likely to get an entry level gig on a red team but if you are interested in pen-testing check out https://jhalon.github.io/becoming-a-pentester/ and https://github.com/yeyintminthuhtut/Awesome-Red-Teaming
Ghostwriter
-
How do you make writing reports more pleasant?
We used Serpico for a long time, even after they stopped supporting it. Finally, we switched over to Ghostwriter, and it's been pretty good for us.
-
Red Team Equipment for Budget Proposal
For software, pretty much everything you might need to start out is available as open source. Besides the actual testing stuff, don't forget to look at tools to facilitate collaboration + reporting (highly recommend looking at https://github.com/GhostManager/Ghostwriter). Also checkout: https://github.com/yeyintminthuhtut/Awesome-Red-Teaming
What are some alternatives?
nanodump - The swiss army knife of LSASS dumping
caldera - Automated Adversary Emulation Platform
Starkiller - Starkiller is a Frontend for PowerShell Empire.
mediator - An extensible, end-to-end encrypted reverse shell that works across networks without port forwarding.
SharpLAPS - Retrieve LAPS password from LDAP
kubestriker - A Blazing fast Security Auditing tool for Kubernetes
Viper - Attack Surface Management & Red Team Simulation Platform 互联网攻击面管理&红队模拟平台
ShonyDanza - A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.
Red-Team-Advent-of-Code - Red Teaming / Pentesting challenges for my Advent-Of-Code 2021.
Kraken - Kraken, a modular multi-language webshell coded by @secu_x11
public-pentesting-reports - A list of public penetration test reports published by several consulting firms and academic security groups.
DumpsterFire - "Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.