Ω / LINKS / METADATA ONLY

Red team tools.

Reviewed project metadata and official links for red, blue, purple, and cross-team security work.

Evidence reviewed 2026-10-11Bounded seed · not an endorsement or a claim of global completeness

This is a dated, editorially reviewed seed. Links go to upstream projects or vendors. A listing is not authorization, safety certification, legal advice, or a recommendation to deploy a tool. Confirm scope, licensing, current maintenance, and your organization's rules before use.

RED TEAM

NetExec

Network and directory assessment framework for authorized environments.

Identity security Network assessment

BSD-2-Clause
Reviewed Oct 12, 2026

BLUE TEAM · RED TEAM

Nikto

Web-server exposure and configuration assessment tooling.

Application security Vulnerability assessment

GPL-3.0-only code; databases and LibWhisker have separate terms.
Reviewed Oct 12, 2026

CROSS-TEAM · RED TEAM

Nmap

Network discovery and service identification for defined assessment scopes.

Network assessment

Nmap Public Source License 0.95; not a standard OSI license.
Reviewed Oct 12, 2026

PURPLE TEAM · RED TEAM

Nuclei

Template-based exposure validation after explicit scope and authorization.

Application security Detection and control validation Vulnerability assessment

MIT
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

OpenAEV

Adversarial exposure validation, atomic testing, and exercise reporting platform.

Detection and control validation Exposure validation and BAS Reporting and collaboration

Community Edition Apache-2.0; Enterprise Edition uses Filigran terms.
Reviewed Oct 12, 2026

BLUE TEAM · RED TEAM

OpenVAS Scanner

Network vulnerability scanning component of Greenbone Community Edition.

Vulnerability assessment

GPL-2.0 family with file-level qualifiers.
Reviewed Oct 12, 2026

CROSS-TEAM · RED TEAM

OWASP Amass

Attack-surface and DNS asset discovery for explicitly scoped research.

Reconnaissance and asset discovery

Apache-2.0 for the main program; separately licensed subcomponents may apply.
Reviewed Oct 12, 2026

RED TEAM

Pacu

AWS-focused identity and cloud security assessment framework.

Cloud security Identity security

BSD-3-Clause
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

Picus Autonomous Exposure Validation Platform

Commercial adversarial exposure and attack-path validation platform.

Detection and control validation Exposure validation and BAS

Proprietary annual subscription.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

Prowler

Cloud posture, identity, compliance, and exposure assessment.

Cloud security Vulnerability management

Apache-2.0 for the canonical open-source project; managed editions have separate terms.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

SafeBreach Validate

Commercial breach-and-attack simulation and detection validation platform.

Detection and control validation Exposure validation and BAS

Proprietary commercial subscription.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · RED TEAM

ScoutSuite

Point-in-time multi-cloud configuration and exposure assessment.

Cloud security Vulnerability assessment

GPL-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

SCYTHE AEV Platform

Commercial adversary-emulation and detection-regression platform.

Adversary emulation Detection and control validation Exposure validation and BAS Reporting and collaboration

Proprietary commercial license scoped by deployment.
Reviewed Oct 12, 2026

RED TEAM

Sliver

Adversary-emulation and operator-infrastructure framework for controlled engagements.

Adversary emulation Command and control

GPLv3 with separately licensed subcomponents.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

Splunk Attack Range

Instrumented security lab orchestration and telemetry generation.

Detection and control validation Detection engineering Security lab orchestration

Apache-2.0
Reviewed Oct 12, 2026

RED TEAM

sqlmap

Specialist SQL injection validation and database assessment tooling.

Application security Vulnerability assessment

GPL v2 or later with project clarifications and exceptions.
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

Stratus Red Team

Granular cloud adversary emulation for telemetry and detection validation.

Adversary emulation Cloud security Detection and control validation

Apache-2.0
Reviewed Oct 12, 2026

RED TEAM

Subfinder

Passive subdomain discovery and namespace expansion for scoped assets.

Reconnaissance and asset discovery

MIT
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

VECTR

Purple-team exercise planning, test tracking, measurement, and reporting.

ATT&CK mapping and coverage Detection and control validation Reporting and collaboration

Custom VECTR terms/EULA; bundled Atomic Red material retains separate licensing.
Reviewed Oct 12, 2026

CROSS-TEAM · RED TEAM

Wapiti

Black-box web and API application security scanner.

Application security Vulnerability assessment

GPL-2.0
Reviewed Oct 12, 2026

BLUE TEAM · CROSS-TEAM · PURPLE TEAM · RED TEAM

ZAP by Checkmarx

Intercepting proxy and web application security testing platform.

Application security Detection and control validation

Apache-2.0
Reviewed Oct 12, 2026