Exploitationadversaryemulationredteamautomationincidentresponse

Caldera

Scalable Automated Adversary Emulation Platform. Automates adversary emulation, assists manual red-teams, and automates incident response.

Description

Caldera is a cybersecurity framework designed to easily automate adversary emulation. It provides a scalable platform for simulating attacker behaviors in a controlled environment.

The tool assists manual red-teams by offering structured emulation capabilities, enabling teams to test defenses against realistic adversary tactics. It also supports automation of incident response workflows, streamlining detection and mitigation processes.

With an installed size of 69.93 MB, Caldera integrates numerous Python dependencies for web services, async operations, and security functions, making it suitable for comprehensive red team exercises.

How It Works

Caldera operates as a server application (server.py) that loads plugins and manages an object store for emulation state. It supports environment files, logging levels, and plugin-specific startups, using async Python libraries like aiohttp for web interfaces and asyncssh for operations. The --fresh flag clears the object store on startup, ensuring clean sessions.

Installation

bash

sudo apt install caldera

Flags

-h, --helpshow this help message and exit

-E, --environment ENVIRONMENTSelect an env. file to use

-l, --log {DEBUG,INFO,WARNING,ERROR,CRITICAL}Set the logging level

--freshremove object_store on start

-P, --plugins PLUGINSStart up with a single plugin

--insecureEnable insecure mode

--uidev UIDEVHOSTSet UI dev host

--buildBuild the application

Examples

Display the help message and usage information for the Caldera server

caldera -h

Start Caldera using a specific environment file

caldera -E prod.env

Start Caldera with DEBUG logging level

caldera -l DEBUG

Start Caldera and remove the object store on startup

caldera --fresh

Start Caldera with a single plugin named sandbox

caldera -P sandbox

Start Caldera in insecure mode

caldera --insecure

Start Caldera with UI dev host set to localhost:8080

caldera --uidev localhost:8080

Updated 2025-Dec-09kali.org ↗