BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM
BadZure
Disposable Azure and Entra lab orchestration for attack-path and detection exercises.
Apache-2.0
Reviewed Oct 12, 2026
Ω / LINKS / METADATA ONLY
Identity security.
Reviewed project metadata and official links for red, blue, purple, and cross-team security work.
This is a dated, editorially reviewed seed. Links go to upstream projects or vendors. A listing is not authorization, safety certification, legal advice, or a recommendation to deploy a tool. Confirm scope, licensing, current maintenance, and your organization's rules before use.
BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM
BloodHound Community Edition
Graph-based identity and attack-path analysis for offensive and defensive workflows.
Apache-2.0 unless a lower-level component license states otherwise.
Reviewed Oct 12, 2026
BLUE TEAM · RED TEAM
Certipy
Active Directory Certificate Services assessment for offensive and defensive review.
MIT
Reviewed Oct 12, 2026
RED TEAM
Impacket
Protocol library and utilities for authorized Windows-network research.
Slightly modified Apache Software License, per upstream.
Reviewed Oct 12, 2026
BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM
msInvader
Microsoft 365 and Azure simulation for telemetry and detection validation.
Apache-2.0
Reviewed Oct 12, 2026
RED TEAM
NetExec
Network and directory assessment framework for authorized environments.
BSD-2-Clause
Reviewed Oct 12, 2026
RED TEAM
Pacu
AWS-focused identity and cloud security assessment framework.
BSD-3-Clause
Reviewed Oct 12, 2026