CyberRange---The-Open-Source-AWS-Cyber-Range - This CyberRange project represents the first open-

项目说明

!alt text
![CircleCI]()

O:

This CyberRange project represents the first open-source Cyber Range blueprint in the world.

This project provides a bootstrap framework for a complete offensi, reverse engineering, & security intelligence tooling in a private research lab using the AWS Cloud.

This project contains systems and a toolkit of the most powerful open-source / community edition tools known to Penetration testers.

It simply provides a researcher with a disposable offensive / defensi en in less than 5 minutes.

!What does it create
!how long does it take

Get Started

To gain access you must send me your AWS account number so I can share the 30+ Amazon Machine Images (AMIs).

Use my secure FormAssembly form -> CyberRange Sign-Up Form

Then - Read the Getting Started Guide
<br/>

Range History

Release Notes:

view the changelog

<b>v2</b> - released on Sept 6, 2019
v2 is simply a collection of the best-in-class tools, most emerging toolsets, and bootstrap frameworks to create an integrated solution capable of enormous growth.

features include: makefile, inspec tests, detection lab integration, commandoVM v2,
kali 2019.4 w/ the following opensource github tools: CyberRange, DetectionLab, IntruderPayloads,
aws-credential-compromise-detection, aws-nuke, blast-radius, cloudgoat, cloudmapper, packer-windows,
pacu, security-monkey-terraform, security_monkey, sites-using-cloudflare,
net-creds, Reconnoitre, shell_generator.sh, msploitego, awesome-nodejs-pentest,
cloudgoat, hammer, joomscan, learning-tools, LetsMapYourNetwork,
php-webshells, PowerHub, PowerSploit, snmpwn, , ScoutSuite, prowler,
pacbot, terraform-aws-secure-baseline, gitleaks, my-arsenal-of-aws-security-tools

Range Technology

CyberRange combines best practices with emerging technologies.
- Amazon Web Services
- Kali
- Nessus
- Commando-VM - a windows-based penetration testing VM
- Terraform
- OpenSourced VM's See Asset In
- using a CI/CD tool to builds CircleCI
- Docker / docker-compose
- Metasplotiable 2/3 & other open-source vuln vms on
- DetectionLab
- Inspec - to test the state of your en, application, system, processes, configurations, etc.
- Plus Many more things to setup, configure, and experiment with.

Domains of knowledge

This open-source research lab provides a bootstrap learning platform for
Technologists studying any one of the "Big-3" technology skills.

1. Cyber Security
2. Cloud Computing
3. DevOps

This project supports 7 gigantically broad domains of technical knowledge.

1. Offensi
2. SecDevOps
3. Architecture & Engineering
4. , Change, & Configuration Management
5. Quality Assurance
6. Auditing - Processing, Systems, Applications
7. De - Infrastructure / Web Applications

Mission Statement

The ultimate expectation is to emulate the quality, format, and presentation of
the Syracuse Uni Cyber SEED Labs while
creating strategic hubs of Cyber Security Center-of-Excellence Partnerships where the gap
between enterprise experience & academic learning is addressed by focusing training paths on
people, products, and process.

SEED Funding / Training Programs

AWS Educate - Free cloud training for students w/ edu address <br/>
AWS EdStart - $500 in AWS Credits for startup's <br/>
Program Solicitation NSF 17-573 aims to make ad in informal STEM learning. <br/>
Graduate Research Fellowship Program (GRFP) - SU's Master of Cyber Security program requires a bit more funding, this is opensource - win,win,win.<br/>
America's Seed Fund - a creati

Credits

- Chris Long - Detection Lab
- Omar Santos - websploit & docker scripts
- FireEye - CommandoVM & FlareVM
- All Github projects
- Kali Maintainers
- Tenable Nessus Engineers
- This project is a fork of a well-architected terraform AWS framework -> fedekau/terraform-with-circleci-example

项目信息

开发语言：Makefile

Star 数：9

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕This CyberRange project represents the first open-source Cyber Range blueprint in the world. This project provides a bootstrap framework for a complete offensive, defensive, reverse engineering, & security intelligence tooling in a private research lab using the AWS Cloud. This project contains vulnerable systems and a toolkit of the most powerful open-source / community edition tools known to Penetration testers. It simply provides a researcher with a disposable offensive / defensive AWS-based environment in less than 5 minutes.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。