Open Source Tools · Category

Adversary emulation and security testing

Frameworks used by red and purple teams to emulate attacker techniques and test detections in authorised engagements.

Alternatives toAttackIQ KnowBe4

SearchLicenceLanguageSort by

4 tools

Metasploit Framework
Penetration testing framework
Rapid7's open-source framework for developing, testing and running exploit modules and auxiliary checks in authorised security assessments.
Stars
39k
Forks
15k
Last commit
today
BSD-3-ClauseOpen sourceAdversary emulation and security testingDual-use
Gophish
Phishing simulation framework for awareness programmes
Open-source framework to run authorised phishing simulation campaigns, with templates, landing pages, scheduling and result tracking.
Stars
14k
Forks
3k
Last commit
2 years ago
MITOpen sourceAdversary emulation and security testingDual-use
Alternative toKnowBe4
Atomic Red Team
Small detection tests mapped to MITRE ATT&CK
Red Canary's library of small, portable tests mapped to MITRE ATT&CK techniques, used to check whether detections and logging work.
Stars
13k
Forks
3.2k
Last commit
1 month ago
MITOpen sourceAdversary emulation and security testingDual-use
Alternative toAttackIQ
Caldera
Automated adversary emulation platform
Adversary emulation platform created by MITRE, now in the Apache organisation on GitHub, that runs ATT&CK-mapped operations through agents to test defences.
Stars
7.5k
Forks
1.4k
Last commit
1 month ago
Apache-2.0Open sourceAdversary emulation and security testingDual-use
Alternative toAttackIQ