Build redcolors - a local cloud attack simulator for red-team training and security research. This tool will simulate cloud-native attack chains in a safe, offline environment to prepare candidates for Security Researcher – Red Team roles.
- Target Environment: Local simulation only (127.0.0.1, Docker containers, JSON files)
- Attack Vectors: IAM abuse, privilege escalation, lateral movement, data exfiltration simulation
- Output: CloudTrail-like logs, SIEM alerts, technical reports for defenders
- Technology Stack: Python-based tooling with local Flask APIs and JSON data models
- NO REAL CLOUD API CALLS - All cloud behavior emulated locally
- NO LIVE ATTACKS - Simulation only against local files/containers
- OFFLINE OPERATION - Tool must function without internet connectivity
- AUDIT LOGGING - Every simulated action logged with safety justification
- DEFENDER FOCUS - Generate artifacts useful for SOC/engineering teams
- Demonstrate IAM privilege escalation path discovery
- Simulate realistic attack chains with proper logging
- Generate actionable security reports and alerts
- Show proficiency in cloud-native security concepts
- Maintain complete safety through local-only operations
- Cloud IAM modeling and analysis
- Attack chain simulation and automation
- Custom security tooling development
- Threat intelligence and reporting
- Red-team methodology in controlled environments