[addtool] Stratus Red Team

[gwen001]

[tags]redteam,mitre,cloud,aws[/tags] [short_descr]Granular, actionable adversary emulation for the cloud.[/short_descr] [link] https://stratus-red-team.cloud [/link] [link] https://github.com/DataDog/stratus-red-team [/link] [long_descr] Stratus Red Team is a lightweight Go binary you can install easily. It comes packaged with a number of AWS-specific attack techniques. Each attack technique as a documentation page, automatically generated from source code.

Stratus Red Team handles spinning up any infrastructure or configuration needed to execute an attack technique. This is what it calls warming-up an attack technique. Once an attack technique is “warm”, it can be detonated, i.e. executed to emulate the attacker behavior it intends to simulate.

Stratus Red Team is available for free, it's a lightweight, easy-to-install Go binary that comes packaged with a number of AWS-specific attack techniques, such as:

• Credential access: Steal EC2 instance credentials
• Discovery: Execute discovery commands on an EC2 instance
• Defense evasion: Stop a CloudTrail trail
• Exfiltration: Exfiltrate data from an S3 bucket by backdooring its bucket policy [/long_descr] [image] https://raw.githubusercontent.com/gwen001/offsectools_www/main/tmp/7ef5772062a926ec44121f4772e8e412.gif [/image]

[gwen001]

Issue correctly handled, tool is waiting for human validation.

[gwen001]

Tool has been accepted by the team: https://offsec.tools/tool/stratus-red-team

Thank you for your contribution!