facebookincubator/TTPForge
Fork: 31 Star: 335 (更新于 2024-10-21 06:56:03)
license: MIT
Language: Go .
The TTPForge is a Cybersecurity Framework for developing, automating, and executing attacker Tactics, Techniques, and Procedures (TTPs).
最后发布版本: v1.2.0 ( 2024-09-11 23:57:30)
TTPForge
TTPForge is a cyber attack simulation platform designed and built by Sam Manzer (@d3sch41n), Alek Straumann (@CrimsonK1ng), and Geoff Pamerleau (@Sy14r), and including subsequent contributions from many good folks in Meta’s Red, Blue, and Purple security teams. Jayson Grace (@l50) migrated the project to GitHub and assisted with preparation for the project’s open source release.
This project promotes a Purple Team approach to cybersecurity with the following goals:
- To help blue teams accurately measure their detection and response capabilities through high-fidelity simulations of real attacker activity.
- To help red teams improve the ROI/actionability of their findings by packaging their attacks as automated, repeatable simulations.
TTPForge allows you to automate attacker tactics, techniques, and procedures (TTPs) using a powerful but easy-to-use YAML format. Check out the links below to learn more!
Table of Contents
- Installation
- Documentation
- Getting Started - Developer
- Go Package Documentation
- Creating a new release
Installation
-
Get latest TTPForge release:
curl \ https://raw.githubusercontent.com/facebookincubator/TTPForge/main/dl-rl.sh \ | bash
At this point, the latest
ttpforge
release should be in$HOME/.local/bin/ttpforge
and subsequently, the$USER
's$PATH
.If running in a stripped down system, you can add TTPForge to your
$PATH
with the following command:export PATH=$HOME/.local/bin:$PATH
-
Initialize TTPForge configuration
This command will place a configuration file at the default location
~/.ttpforge/config.yaml
and configure theexamples
andforgearmory
TTP repositories:ttpforge init
-
List available TTP repositories (should show
examples
andforgearmory
)ttpforge list repos
The
examples
repository contains the TTPForge examples found in this repository. The ForgeArmory repository contains our arsenal of attacker TTPs powered by TTPForge. -
List available TTPs that you can run:
ttpforge list ttps
-
Examine an example TTP:
ttpforge show ttp examples//args/basic.yaml
-
Run the specified example:
ttpforge run examples//args/basic.yaml \ --arg str_to_print=hello \ --arg run_second_step=true
最近版本更新:(数据更新于 2024-09-22 18:36:11)
2024-09-11 23:57:30 v1.2.0
2024-08-10 05:27:46 v1.1.0
2023-11-22 00:40:52 v1.0.12
2023-11-22 00:26:35 v1.0.11
2023-11-22 00:05:21 v1.0.10
2023-10-14 10:39:36 v1.0.9
2023-10-03 21:23:42 v1.0.8
2023-09-12 12:33:25 v1.0.7
2023-09-07 02:20:20 v1.0.6
2023-09-01 01:43:09 v1.0.5
facebookincubator/TTPForge同语言 Go最近更新仓库
2024-11-05 08:55:31 XTLS/Xray-core
2024-11-05 00:03:47 SagerNet/sing-box
2024-11-04 20:34:19 Permify/permify
2024-11-04 15:07:27 containerd/containerd
2024-11-03 20:10:56 flipped-aurora/gin-vue-admin
2024-11-03 00:46:25 dolthub/dolt