Ω / LINKS / METADATA ONLY

Red team tools.

Reviewed project metadata and official links for red, blue, purple, and cross-team security work.

Evidence reviewed 2026-10-11Bounded seed · not an endorsement or a claim of global completeness

This is a dated, editorially reviewed seed. Links go to upstream projects or vendors. A listing is not authorization, safety certification, legal advice, or a recommendation to deploy a tool. Confirm scope, licensing, current maintenance, and your organization's rules before use.

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

Apache Caldera (Incubating)

Adversary-emulation orchestration and ATT&CK-aligned exercise reporting.

Adversary emulation Detection and control validation Reporting and collaboration

Apache-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

Atomic Red Team

Portable ATT&CK-aligned tests for telemetry and control validation.

Adversary emulation Detection and control validation Detection engineering

MIT
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

Attack Flow

Attack-chain modeling, sequencing, visualization, and reporting.

ATT&CK mapping and coverage Reporting and collaboration Threat intelligence

Apache-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

AttackIQ Platform

Commercial adversarial exposure and security-control validation platform.

Detection and control validation Exposure validation and BAS Reporting and collaboration

Proprietary commercial subscription.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

BadZure

Disposable Azure and Entra lab orchestration for attack-path and detection exercises.

Detection and control validation Identity security Security lab orchestration

Apache-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

BloodHound Community Edition

Graph-based identity and attack-path analysis for offensive and defensive workflows.

Identity security Vulnerability assessment

Apache-2.0 unless a lower-level component license states otherwise.
Reviewed Oct 12, 2026

RED TEAM

Burp Suite Professional / Community Edition

Commercial and community web application testing workbench.

Application security

Proprietary PortSwigger terms; Community Edition has separate terms.
Reviewed Oct 12, 2026

BLUE TEAM · RED TEAM

Certipy

Active Directory Certificate Services assessment for offensive and defensive review.

Identity security Vulnerability assessment

MIT
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

Cymulate Exposure Validation

Commercial adversarial exposure and detection-validation platform.

Detection and control validation Exposure validation and BAS

Proprietary commercial subscription.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

DefectDojo Community Edition

Application-security finding management, deduplication, and remediation workflow.

Application security Reporting and collaboration Vulnerability management

BSD-3-Clause for the open-source Community repository; commercial editions differ.
Reviewed Oct 12, 2026

RED TEAM

dnsx

DNS resolution and record enrichment for an authorized asset set.

Network assessment Reconnaissance and asset discovery

MIT
Reviewed Oct 12, 2026

CROSS-TEAM · RED TEAM

Dradis Community Edition

Collaborative assessment evidence and report management.

Reporting and collaboration

GPL-2.0 for Community Edition; Professional is commercial.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · RED TEAM

Faraday

Multiuser finding normalization, remediation tracking, and reporting.

Reporting and collaboration Vulnerability management

GPL-3.0
Reviewed Oct 12, 2026

RED TEAM

feroxbuster

Recursive web content discovery for defined targets.

Application security Reconnaissance and asset discovery

MIT
Reviewed Oct 12, 2026

RED TEAM

ffuf

Web content and input-surface discovery for defined targets.

Application security Reconnaissance and asset discovery

MIT
Reviewed Oct 12, 2026

RED TEAM

httpx

HTTP endpoint probing and service metadata for an authorized asset set.

Network assessment Reconnaissance and asset discovery

MIT
Reviewed Oct 12, 2026

RED TEAM

Impacket

Protocol library and utilities for authorized Windows-network research.

Identity security Network assessment

Slightly modified Apache Software License, per upstream.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

Infection Monkey

Adversary emulation and propagation-path validation for controlled environments.

Adversary emulation Detection and control validation Exposure validation and BAS

GPL-3.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

Invoke-AtomicRedTeam

PowerShell orchestration for repeatable Atomic Red Team validation.

Adversary emulation Detection and control validation

MIT
Reviewed Oct 12, 2026

CROSS-TEAM · PURPLE TEAM · RED TEAM

Metasploit Framework

Modular framework for controlled validation and adversary emulation.

Adversary emulation Vulnerability assessment

3-Clause BSD for the framework; bundled dependencies have separate licenses.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

MITRE ATT&CK Navigator

ATT&CK matrix annotation and coverage visualization.

ATT&CK mapping and coverage Reporting and collaboration

Apache-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

MITRE ATT&CK Workbench

Local ATT&CK knowledge management, extensions, and sharing.

ATT&CK mapping and coverage Reporting and collaboration Threat intelligence

Apache-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

msInvader

Microsoft 365 and Azure simulation for telemetry and detection validation.

Adversary emulation Detection and control validation Identity security

Apache-2.0
Reviewed Oct 12, 2026

RED TEAM

Naabu

Rate-controlled port discovery for defined assessment scopes.

Network assessment

MIT
Reviewed Oct 12, 2026