n0mad1k/mosaic
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Initial scaffold: .gitignore, config, requirements, data seeds, directory structure

Browse Source
This commit is contained in:
n0mad1k
2026-03-19 08:34:32 -04:00
commit aa0f35803f
26 changed files with 1908 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
data/known_tools.json
+44
View File
@@ -0,0 +1,44 @@
{
"version": "1.0",
"tools": [
{"name": "HIVE", "aliases": ["Hive"], "category": "implant"},
{"name": "Grasshopper", "aliases": [], "category": "framework"},
{"name": "Marble", "aliases": ["Marble Framework"], "category": "obfuscation"},
{"name": "Weeping Angel", "aliases": ["WA"], "category": "implant"},
{"name": "Dark Matter", "aliases": [], "category": "implant"},
{"name": "Athena", "aliases": [], "category": "implant"},
{"name": "AfterMidnight", "aliases": ["After Midnight"], "category": "implant"},
{"name": "Brutal Kangaroo", "aliases": ["BK"], "category": "framework"},
{"name": "OutlawCountry", "aliases": ["Outlaw Country"], "category": "implant"},
{"name": "BothanSpy", "aliases": ["Bothan Spy"], "category": "credential_theft"},
{"name": "Gyrfalcon", "aliases": [], "category": "credential_theft"},
{"name": "HighRise", "aliases": ["High Rise"], "category": "proxy"},
{"name": "Achilles", "aliases": [], "category": "trojan"},
{"name": "Aeris", "aliases": [], "category": "implant"},
{"name": "SeaPea", "aliases": ["Sea Pea"], "category": "rootkit"},
{"name": "CouchPotato", "aliases": ["Couch Potato"], "category": "collection"},
{"name": "Dumbo", "aliases": [], "category": "evasion"},
{"name": "Pandemic", "aliases": [], "category": "implant"},
{"name": "Cherry Blossom", "aliases": ["CherryBlossom", "CB"], "category": "router_exploit"},
{"name": "McNugget", "aliases": [], "category": "implant"},
{"name": "FinFisher", "aliases": ["FinSpy"], "category": "spyware"},
{"name": "Pegasus", "aliases": [], "category": "spyware"},
{"name": "Predator", "aliases": [], "category": "spyware"},
{"name": "WARRIOR PRIDE", "aliases": [], "category": "mobile_implant"},
{"name": "PRISM", "aliases": [], "category": "collection_program"},
{"name": "XKeyscore", "aliases": ["XKEYSCORE", "XKS"], "category": "sigint"},
{"name": "TURBINE", "aliases": [], "category": "implant_management"},
{"name": "FOXACID", "aliases": ["FoxAcid"], "category": "exploit_server"},
{"name": "QUANTUM", "aliases": ["QuantumInsert"], "category": "injection"},
{"name": "Regin", "aliases": [], "category": "platform"},
{"name": "Flame", "aliases": ["Flamer", "sKyWIper"], "category": "platform"},
{"name": "Duqu", "aliases": ["Duqu 2.0"], "category": "platform"},
{"name": "Stuxnet", "aliases": [], "category": "weapon"},
{"name": "EternalBlue", "aliases": ["MS17-010"], "category": "exploit"},
{"name": "DoublePulsar", "aliases": [], "category": "implant"},
{"name": "EternalRomance", "aliases": [], "category": "exploit"},
{"name": "Cobalt Strike", "aliases": ["CS", "CobaltStrike"], "category": "c2_framework"},
{"name": "Metasploit", "aliases": ["MSF"], "category": "framework"},
{"name": "Mimikatz", "aliases": [], "category": "credential_theft"}
]
}
data/mitre_attack.json
+22
View File
@@ -0,0 +1,22 @@
{
"version": "15.1",
"sha256": "placeholder_will_be_updated_on_first_download",
"source": "https://raw.githubusercontent.com/mitre/cti/master/enterprise-attack/enterprise-attack.json",
"tactics": [
{"id": "TA0001", "name": "Initial Access"},
{"id": "TA0002", "name": "Execution"},
{"id": "TA0003", "name": "Persistence"},
{"id": "TA0004", "name": "Privilege Escalation"},
{"id": "TA0005", "name": "Defense Evasion"},
{"id": "TA0006", "name": "Credential Access"},
{"id": "TA0007", "name": "Discovery"},
{"id": "TA0008", "name": "Lateral Movement"},
{"id": "TA0009", "name": "Collection"},
{"id": "TA0010", "name": "Exfiltration"},
{"id": "TA0011", "name": "Command and Control"},
{"id": "TA0040", "name": "Impact"},
{"id": "TA0042", "name": "Resource Development"},
{"id": "TA0043", "name": "Reconnaissance"}
],
"techniques": []
}