Security Incident Response Automated Simulations (SIRAS) are internal/controlled actions that provide a structured opportunity to practice the incident response plan and procedures during ...

Red Team’s SIEM – tool for Red Teams for tracking and alarming about Blue Team activities as well as enhanced usability in long ...

A (coverage-)guided fuzzer for dynamic language interpreters based on a custom intermediate language (“FuzzIL”) which can be mutated and translated to JavaScript. Usage ...

The pyattck package retrieves all Tactics, Techniques, Actors, Malware, Tools, and Mitigations from the MITRE ATT&CK Frameworks as well as any defined relationships ...

Spraykatz is a tool without any pretention able to retrieve credentials on Windows machines and large Active Directory environments. It simply tries to procdump machines and parse dumps ...

A distributed systems and infrastructure simulator for attacking and debugging Kubernetes: simulator creates a Kubernetes cluster for you in your AWS account; runs ...

Security risk analysis for Kubernetes resources Live demo Visit Kubesec.io This uses ControlPlane’s hosted API at v2.kubesec.io/scan Download Kubesec Kubesec is available as ...

Scout Suite is an open source multi-cloud security-auditing tool, which enables security posture assessment of cloud environments. Using the APIs exposed by cloud ...

tfsec uses static analysis of your terraform templates to spot potential security issues. Now with terraform v0.12+ support. Example Output Installation Install with ...

Full documentation, training and use-cases can be found here. CALDERA™ is a cyber security framework designed to easily run autonomous breach-and-simulation exercises. It ...