Search Results for "red"

Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. Sliver's implants support C2 over Mutual TLS (mTLS), WireGuard, HTTP(S), and DNS and are dynamically compiled with per-binary asymmetric encryption keys. The server and client support MacOS, Windows, and Linux. Implants are supported on MacOS, Windows, and Linux (and possibly every Golang compiler target but we've not tested them all).

...The app presents key totals such as income, spending, net balance, transaction count, time range, and bill metadata in a more readable dashboard. It also includes charts for comparing income and expenses, analyzing payment method distribution, and reviewing categories such as merchant purchases, transfers, red packets, and refunds. The project is aimed at personal finance review rather than payment processing or merchant integration. It is useful for users who want a local visual tool to make WeChat transaction records easier to inspect.

...It includes multiple exploitation “modules” for common SSRF-based attacks or pivoting techniques, such as DNS zone transfers, MySQL/Postgres command execution, Docker API info leaks, and network scans. Because SSRF often leads to lateral movement or internal network access, SSRFmap is especially useful for red-teamers and pentesters who want to explore chains rather than just the vulnerability surface. The repository also demonstrates a pragmatic mindset; rather than just “find SSRF”, it tries to “exploit SSRF” for impact, helping security testers build full end-to-end workflows.

...It also includes modular listeners, modules, stagers, and communication channels, allowing operators to adapt the framework to different lab or assessment needs. Because it is a C2 and post-exploitation framework, it is appropriate only for authorized red-team, training, and research environments.

0xsp mongoose red version is provided to assist your needs during cyber security simulation, by using this version you will be able to audit a targeted Windows operation system for system vulnerabilities, misconfiguration, and privilege escalation attacks and replicate the tactics and techniques of an advanced adversary in a network. With node js support for web application API, it becomes much easier for installation and customization in a timely manner, the windows sensor agent will communicate with application API to transfer results and receive commands as a bidirectional technique.

...Beyond raw exploitation, the framework includes post-exploitation tooling for lateral movement, persistence, data exfiltration simulations, and evidence collection, enabling red teams to exercise detection and incident response workflows.

PowerSploit is a collection of PowerShell modules that historically served as a toolkit for post-exploitation tasks, red-team exercises, and offensive-security research—covering areas like reconnaissance, lateral movement, persistence, and situational awareness. The repository bundles many focused scripts: code to enumerate system and Active Directory information, payload generation helpers, in-memory execution utilities, and modules to interact with credentials and services.

ServEngine is a J2EE component suite for online applications development developed by Ignacio de Córdoba, from Red SKIOS S.A., a spanish software consulting company based in Madrid. ServEngine core uses JPA EJBs for Model and JSF2 for View through CDI.

RedRoo implements a framework for defining and executing hierarchical state machines. As a Red Kangaroo jumps from place to place, RedRoo will transition your application from state to state feeding on the events you pass to it. So get jumping!