S3N4T0R-0X0/APTs-Adversary-Simulation

# APT 对手模拟 这是一个基于 `俄罗斯、中国、伊朗和朝鲜` 等国家支持的 APT 组织在现实世界中使用的战术、技术和程序 (TTPs) 的全面模拟高级持续性威胁 (APT) 攻击集合。  ## 🧠 概述 本仓库包含针对各个关键领域的详细对手模拟 APT 攻击活动。每项模拟均包含定制工具、命令与控制 (C2) 服务器、后门、漏洞利用技术、加载器 (stagers)、引导加载程序以及其他反映真实世界攻击中使用的恶意产物。这些模拟基于来自 Palo Alto Unit 42、Kaspersky、Microsoft、Cisco、Trellix、CrowdStrike 和 WithSecure 等领先网络安全公司的广泛研究。 **进一步了解此经验的重要性和成果：** - [**为什么要进行对手模拟？**](https://medium.com/@S3N4T0R/why-adversary-simulation-a1c69e8bd93a) - 了解模拟高级威胁的战略价值 - [**对手模拟 VS 对手仿真**](https://medium.com/@S3N4T0R/adversary-simulation-vs-adversary-emulation-381b920a12f6) - 核心区别以及何时使用每种方法 - [**如何模拟 APT**](https://medium.com/@S3N4T0R/adversary-simulation-is-not-a-methodology-its-the-outcome-of-experience-4dfeafdba6da?postPublishedType=initial) - 对手模拟不是一种方法论，它是经验的结晶 ## 🎯 模拟的 APT 组织 APT 组织的命名约定遵循 CrowdStrike 的分类法。  **以下是已模拟 APT 组织的完整列表：** | **原籍国** | **俄罗斯 🇷🇺** | **中国 🇨🇳** | **朝鲜 🇰🇵** | **伊朗 🇮🇷** | |-----------------------|----------------|----------------|--------------------|---------------| | **APT 组织** | [**Cozy Bear ✅**](https://github.com/S3N4T0R-0X0/APT29-Adversary-Simulation.git)
[**Voodoo Bear ✅**](https://github.com/S3N4T0R-0X0/Voodoo-Bear-APT.git)
[**Fancy Bear ✅**](https://github.com/S3N4T0R-0X0/APT28-Adversary-Simulation.git)
[**Energetic Bear ✅**](https://github.com/S3N4T0R-0X0/Energetic-Bear-APT.git)
[**Berserk Bear ✅**](https://github.com/S3N4T0R-0X0/Berserk-Bear-APT.git)
[**Gossamer Bear ✅**](https://github.com/S3N4T0R-0X0/Gossamer-Bear-APT.git)
[**Primitive Bear ✅**](https://github.com/S3N4T0R-0X0/Primitive-Bear-APT.git)
[**Ember Bear ✅**](https://github.com/S3N4T0R-0X0/Ember-Bear-APT.git)
[**Venomous Bear ✅**](https://github.com/S3N4T0R-0X0/Venomous-Bear-APT.git) | [**Mustang Panda ✅**](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/Chinese%20APT/Mustang%20Panda)
[Glacial Panda](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/Chinese%20APT/Glacial-Panda)
[**Wicked Panda ✅**](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/Chinese%20APT/Wicked%20Panda)
[Goblin Panda](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/Chinese%20APT/Goblin-Panda)
[Anchor Panda](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/Chinese%20APT/Anchor-Panda)
[Deep Panda](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/Chinese%20APT/Deep-Panda)
[Samurai Panda](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/Chinese%20APT/Samurai-Panda)
[Phantom Panda](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/Chinese%20APT/Phantom-Panda)
[Sunrise Panda](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/Chinese%20APT/Sunrise-Panda)
[Ethereal Panda](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/Chinese%20APT/Ethereal-Panda) | [**Labyrinth Chollima ✅**](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/North%20Koreans%20APT/Labyrinth%20Chollima)
[**Velvet Chollima ✅**](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/North%20Koreans%20APT/Velvet%20Chollima)
[**Famous Chollima ✅**](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/North%20Koreans%20APT/Famous%20Chollima)
[**Stardust Chollima ✅**](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/North%20Koreans%20APT/Stardust%20Chollima)
[**Ricochet Chollima ✅**](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/North%20Koreans%20APT/Ricochet%20Chollima)
[**Silent Chollima ✅**](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/North%20Koreans%20APT/Silent%20Chollima) | [Helix Kitten](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/Iran%20APT/Helix-Kitten)
[Pioneer Kitten](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/Iran%20APT/Pioneer-Kitten)
[Clever Kitten](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/Iran%20APT/Clever-Kitten)
[**Static Kitten ✅**](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/Iranian%20APT/Static%20Kitten)
[Tracer Kitten](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/Iran%20APT/Tracer-Kitten)
[Nemesis Kitten](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/Iran%20APT/Nemesis-Kitten)
[Charming Kitten](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/Iran%20APT/Charming-Kitten)
[Pulsar Kitten](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/Iran%20APT/Pulsar-Kitten)
[Remix Kitten](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/Iran%20APT/Remix-Kitten)
[Haywire Kitten](https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation/tree/main/Iran%20APT/Haywire-Kitten) | ## 🛠️ 技术框架 所有对手模拟均由 [**BEAR-C2**](https://github.com/S3N4T0R-0X0/BEAR) 驱动，这是一个专为真实威胁模拟而设计的定制命令与控制框架。 

时刻谨记："成为威胁，才能战胜它"

## 📫 联系方式

           

Telegram • Twitter/X • LinkedIn • Reddit

标签：AI合规, API接口, APT模拟, ATT&CK框架, C2服务器, CISA项目, CSV导出, Cutter, HTTP工具, IP 地址批量处理, UML, 中国黑客, 云资产清单, 伊朗黑客, 俄罗斯黑客, 反取证, 后渗透, 后门, 嗅探欺骗, 威胁模拟, 安全评估, 开源软件, 恶意软件, 提权, 插件系统, 搜索语句（dork）, 攻击仿真, 数据包嗅探, 数据展示, 文档安全, 无线安全, 朝鲜黑客, 杀伤链, 权限维持, 横向移动, 武器化, 私有化部署, 紫队, 红队, 编程规范, 网络信息收集, 网络威胁情报, 网络安全, 网络安全审计, 网络战, 逆向工具, 逆向工程, 防御绕过, 防御规避, 隐私保护, 高级持续性威胁, 鱼叉钓鱼