A framework for automating offensive security testing by scripting security tool APIs like Empire and Metasploit.
AutoTTP is a framework for automating Tactics, Techniques, and Procedures (TTPs) in offensive security testing. It allows security professionals to script and automate complex attack sequences using APIs from tools like Empire, Metasploit, and Cobalt Strike, making regression testing and research more efficient.
Security researchers, penetration testers, and red teamers who need to automate repetitive attack sequences for testing, evaluation, or data generation.
It reduces manual effort by enabling IDE-based scripting with autocomplete and debugging, abstracts tool-specific details into reusable modules, and supports multiple security frameworks through their APIs.
Automated Tactics Techniques & Procedures
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Provides auto-complete and documentation for Empire modules within VS Code, as shown in README screenshots, reducing errors and speeding up scripting.
Encapsulates tool-specific details into reusable technique modules, allowing testers to focus on high-level attack sequences rather than API intricacies.
Organizes techniques according to models like MITRE ATT&CK or custom attack life cycles, promoting consistency and reuse in security assessments.
Automates interactions with security tool REST APIs, enabling headless operation for regression testing, data generation, and integration into pipelines.
The README states it's 'still very much work in progress,' leading to potential bugs, incomplete features, and limited community support.
Tested specifically with Empire 2.2; updates to tool APIs (e.g., Metasploit, Cobalt Strike) can break compatibility, requiring manual adaptation.
Requires configuring tools like Empire with RESTful APIs and IDE integration, which may be non-trivial for users unfamiliar with these environments.