SpecterOps Resource Center

Open-source Tools

BloodHound Community Edition

Manage Identity Attack Paths across your hybrid environment and remove the adversary’s favorite target.

Nemesis 2.0

Nemesis 2.0 functions as an "offensive VirusTotal," automatically processing files collected during security assessments through an extensive pipeline of specialized…

Ghostwriter

Ghostwriter is a Django web app for red teams to track projects, clients, assets, reports, and evidence.

Mythic

Mythic is an open-source Command and Control (C2) framework designed around a microservice architecture.

Crucible

Crucible is an extensible, multi-user, cross-platform framework designed for post-exploitation, command and control operations, penetration testing, and red teaming.

SharpSCCM

SharpSCCM is an open-source C# post-exploitation tool designed to leverage Microsoft Configuration Manager.

LudusHound

LudusHound brings BloodHound data to life by creating a fully functional Ludus Range for controlled testing.

SCCMHunter

SCCMHunter is a post-exploitation tool built to streamline identifying, profiling, and attacking SCCM-related assets in an Active Directory domain.

Merlin

Merlin is a cross-platform post-exploitation Command & Control server and agent written in Go.

Page 1 / 3