mirror of
https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation.git
synced 2026-08-04 09:41:40 +02:00
56 lines
4.7 KiB
Markdown
56 lines
4.7 KiB
Markdown
# APTs Adversary Simulation
|
|
|
|
|
|
|
|
A comprehensive collection of simulated Advanced Persistent Threat (APT) attacks based on real-world tactics, techniques, and procedures (TTPs) used by state-sponsored APT Groups from `Russia, China, Iran, and North Korea`.
|
|
|
|
> [!CAUTION]
|
|
> **Important Notice**: This project is strictly for educational, research, and defensive security purposes only. Unauthorized use of these techniques may violate laws and result in serious legal consequences.
|
|
|
|
## 🧠 Overview
|
|
|
|
This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom tools, command and control (C2) servers, backdoors, exploitation techniques, stagers, bootloaders, and other malicious artifacts that mirror those used in real-world attacks. The simulations are based on extensive research from leading cybersecurity firms, including Palo Alto Unit 42, Kaspersky, Microsoft, Cisco, Trellix, CrowdStrike, and WithSecure.
|
|
|
|
**Learn more about the importance and methodology:**
|
|
- [**Why Adversary Simulation?**](https://medium.com/@S3N4T0R/why-adversary-simulation-a1c69e8bd93a) - Understanding the strategic value of simulating advanced threats
|
|
- [**Adversary Simulation VS Adversary Emulation**](https://medium.com/@S3N4T0R/adversary-simulation-vs-adversary-emulation-381b920a12f6) - Key differences and when to use each approach
|
|
|
|
|
|
|
|
## 🎯 Simulated APT Groups
|
|
|
|
The naming convention for APT groups follows CrowdStrike's taxonomy. Below is the complete list of simulated APT Groups:
|
|
|
|
| **Country of Origin** | Russia 🇷🇺 | China 🇨🇳 | North Korea 🇰🇵 | Iran 🇮🇷 |
|
|
|-----------------------|-----------------------|-------------------------|------------------------|----------------------|
|
|
| **APT Groups** | Cozy Bear ✅ | Mustang Panda ✅ | Labyrinth Chollima ✅ | Helix Kitten |
|
|
| | Voodoo Bear ✅ | Glacial Panda | Velvet Chollima ✅ | Pioneer Kitten |
|
|
| | Fancy Bear ✅ | Wicked Panda ✅ | Famous Chollima ✅ | Clever Kitten |
|
|
| | Energetic Bear ✅ | Goblin Panda | Stardust Chollima ✅ | Static Kitten |
|
|
| | Berserk Bear ✅ | Anchor Panda | Ricochet Chollima | Tracer Kitten |
|
|
| | Gossamer Bear ✅ | Deep Panda | Silent Chollima | Nemesis Kitten |
|
|
| | Primitive Bear ✅ | Samurai Panda | | Spectral Kitten |
|
|
| | Ember Bear ✅ | Phantom Panda | | Charming Kitten |
|
|
| | Venomous Bear ✅ | Sunrise Panda | | Pulsar Kitten |
|
|
| | | Ethereal Panda | | Remix Kitten |
|
|
| | | | | Pioneer kitten |
|
|
|
|
## 🛠️ Technical Framework
|
|
|
|
All adversary simulations are powered by **Bear-C2**, a custom command and control framework designed for realistic threat emulation.
|
|
|
|
**Bear-C2 GitHub Repository**: https://github.com/S3N4T0R-0X0/BEAR
|
|
|
|
|
|
|
|
|
|
|
|
|
|
## 📫 Contact
|
|
|
|
If you have any questions, issues, or suggestions, feel free to join our Telegram channel, you're welcome to join!
|
|
|
|
<p align="center"> <strong>🚨 Always Remember: <em>"Be The Threat To Defeat It"</em></strong> </p><p align="center"> <a href="https://t.me/BearC2"> <img src="https://img.icons8.com/color/48/000000/telegram-app.png" alt="Telegram" width="40" height="40"/> </a> <a href="https://x.com/S3N4T0R_0X0"> <img src="https://img.icons8.com/ios-filled/50/000000/twitterx.png" alt="Twitter/X" width="40" height="40"/> </a> <a href="https://eg.linkedin.com/in/s3n4t0r"> <img src="https://img.icons8.com/color/48/000000/linkedin.png" alt="LinkedIn" width="40" height="40"/> </a> <a href="https://www.reddit.com/u/S3N4T0R-0X0/s/pF0LHjjCOs"> <img src="https://img.icons8.com/ios-filled/50/000000/reddit.png" alt="Reddit" width="40" height="40"/> </a> </p><p align="center"> <a href="https://t.me/BearC2">Telegram</a> • <a href="https://x.com/S3N4T0R_0X0">Twitter/X</a> • <a href="https://eg.linkedin.com/in/s3n4t0r">LinkedIn</a> • <a href="https://www.reddit.com/u/S3N4T0R-0X0/s/pF0LHjjCOs">Reddit</a> </p>
|
|
|
|
|