AttackMate: Requirements for a research centric attack orchestration tool

Automating attacks is not only useful for pentesters, but also for testing defence mechanismsor conducting cyber exercises. Many of the known tools have either been developed explicitlyfor simulations, or they do not meet all the requirements for adequately testing security tools.These gaps are to be closed by the ‘AttackMate’ tool developed in this thesis. The requirementsfor this programme were derived from a literature research and objectives were defined. Afterimplementation, three testbed scenarios were created and the defined objectives were checked.‘AttackMate is not only able to carry out attacks in every phase of the cyberkillchain, but alsoallows attack chains to be carried out in which log artefacts are created that can hardly bedistinguished from man-made attacks. This makes ‘AttackMate’ suitable for use in pentesting,as a tool to simulate attacks in cyberexercises and also for evaluating defence mechanisms.