Red teaming tools

The frameworks and utilities that show up in almost every authorised red-team engagement.

Draft — under review

head -10

$ wc -l red-teaming-tools.txt

items 10

01
Cobalt Strike ↗
Fortra
The commercial adversary-simulation platform defenders most need to recognise.
02
Metasploit Framework ↗
Rapid7
The classic exploitation framework, and still the best way to learn exploitation.
03
Sliver
Bishop Fox
Open-source, cross-platform command-and-control used widely in modern engagements.
04
Mythic
open source
A modular C2 framework that makes it easy to plug in custom agents.
05
BloodHound
SpecterOps
Graphs Active Directory attack paths that are invisible in a flat list.
06
Impacket
open source (Fortra)
Python classes for Windows network protocols; the Swiss army knife of AD attacks.
07
Mimikatz
Benjamin Delpy
The credential-extraction tool every Windows defender should test against.
08
Rubeus
GhostPack
Kerberos abuse toolkit for roasting, ticket manipulation and delegation attacks.
09
Responder
open source
LLMNR/NBT-NS poisoning that still finds credentials on far too many networks.
10
Evilginx
Kuba Gretzky
Adversary-in-the-middle phishing that shows why MFA alone is not enough.

More Cybersecurity lists

Cobalt Strike ↗