Top 23 red-teaming Open-Source Projects

• dirsearch

  12 11,306 7.7 Python

  Web path scanner

Project mention: Looking for some help with this Python package | /r/learnpython | 2023-08-19

I am new to Python. With the help of several users (thanks u/Diapolo10 and u/shiftybyte)I've been able to install Python and the dirsearch package. Dirsearch (https://github.com/maurosoria/dirsearch) allows for checking website paths with a wordlist. For example, I have a wordlist file with words like "dog", "cat", "bird", etc and I want to check the validity of those words as extensions on a website. Something like "example.com/bird", "example.com/cat", etc. I have a test wordlist in the same directory as dirsearch, but I am confused on how to proceed with the commands. I want to have it check my wordlist as extensions on the example.com website and then save output on if the webpath is valid or not. Just need a little bit of help.

• sliver

  20 7,614 9.6 Go

  Adversary Emulation Framework

  

Project mention: With VPN's such as Twin Gate and TailScale, why open ports to expose services to the internet? | /r/selfhosted | 2023-07-05

IDK if you are too young to remember the fallout from Snowden, but the Kremlin threw out entire rooms computers and for a time used actual typewriters. Because those computers had, more or less, twingate connectors on them. That's a bit of a rich example, but you're essentially installing what sliver calls an implant, what meterpreter calls a payload, and what Cobalt Strike calls a beacon. It's cool if you want to, but there's no need when you can just open a port with the same technology a Fortune 50 does.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• commando-vm

  9 6,712 4.3 PowerShell

  Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

  

• hoaxshell

  6 2,892 2.1 Python

  A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

Project mention: ExploitToolFinder | /r/hacking | 2023-06-16

• afrog

  1 2,836 9.7 Go

  A Security Tool for Bug Bounty, Pentest and Red Teaming.

Project mention: Afrog explained for bug bounty hunters | dev.to | 2023-12-28

• Penetration-Testing-Tools

  3 2,436 4.1 PowerShell

  A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.

• RedELK

  5 2,296 7.1 Python

  Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

  

Project mention: What project ideas are there for a cybersecurity homelab? | /r/AskNetsec | 2023-06-04

Play with RedELK for learning ELK and monitoring blue team activities - https://github.com/outflanknl/RedELK

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

• Awesome-Cybersecurity-Handbooks

  9 2,084 9.8

  A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.

Project mention: Cybersecurity Handbooks | /r/cybernewsroom | 2023-08-12

Link: https://github.com/0xsyr0/Awesome-Cybersecurity-Handbooks

• inceptor

  3 1,502 1.3 Assembly

  Template-Driven AV/EDR Evasion Framework

• Galaxy-Bugbounty-Checklist

  1 1,324 6.1

  Tips and Tutorials for Bug Bounty and also Penetration Tests.

• moonwalk

  5 1,290 0.0 Rust

  Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps. (by mufeedvh)

• SysReptor

  3 1,152 9.8 Python

  Fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike.

  

• Amsi-Killer

  1 562 3.9 C++

  Lifetime AMSI bypass

• xurlfind3r

  1 524 8.0 Go

  A command-line interface (CLI) based passive URLs discovery utility. It is designed to efficiently identify known URLs of given domains by tapping into a multitude of curated online passive sources.

  

• AlanFramework

  4 462 3.2 Assembly

  A C2 post-exploitation framework

• aws-cloudsaga

  2 427 0.0 Python

  AWS CloudSaga - Simulate security events in AWS

  

• acheron

  1 286 6.9 Assembly

  indirect syscalls for AV/EDR evasion in Go assembly (by f1zm0)

• cervantes

  1 250 7.1 C#

  Cervantes is an open-source, collaborative platform designed specifically for pentesters and red teams. It serves as a comprehensive management tool, streamlining the organization of projects, clients, vulnerabilities, and reports in a single, centralized location. (by CervantesSec)

  

• MrKaplan

  1 244 3.4 PowerShell

  MrKaplan is a tool aimed to help red teamers to stay hidden by clearing evidence of execution.

• offsec-tools

  3 221 9.9 C#

  Compiled tools for internal assessments

  

• InlineWhispers2

  1 174 0.0 Assembly

  Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF) via Syswhispers2

• RanSim

  8 172 0.0 PowerShell

  Ransomware simulation script written in PowerShell. Useful for testing your defenses and backups against real ransomware-like activity in a controlled setting.

• LAZYPARIAH

  2 140 0.0 Ruby

  A tool for generating reverse shell payloads on the fly.

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

red-teaming related posts

• Cybersecurity Handbooks

  1 project | /r/cybernewsroom | 12 Aug 2023

• ExploitToolFinder

  2 projects | /r/hacking | 16 Jun 2023

• Just installed Kali linux...now what? Any links to great content/tutorials to share?

  1 project | /r/Hacking_Tutorials | 20 May 2023

• Create Gold Image from Custom Windows VM

  1 project | /r/sysadmin | 19 Mar 2023

• Virtual Machine Setup for Training

  1 project | /r/cybersecurity | 17 Mar 2023

• AD Offsec Testing Tools Pre-Compiled, up to date, and ready to use

  3 projects | /r/netsec | 22 Feb 2023

• HoaxShell Beta - Integrated with RevShells.com

  1 project | /r/hacking | 17 Feb 2023
• A note from our sponsor - InfluxDB
  www.influxdata.com | 15 May 2024

  Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality. Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com