BadZure automates the deployment of intentionally misconfigured Entra ID tenants and Azure subscriptions, populating them with diverse entities and configurable, traversable attack paths.
-
Updated
Aug 27, 2026 - Python
#
attack-path
Here are 48 public repositories matching this topic...
Salesforce identity and permission graph collector for BloodHound CE. Maps users, profiles, permission sets, roles, groups, sharing rules, connected apps, and field-level security into attack-path graphs.
python security identity graph permissions bloodhound penetration-testing salesforce aura attack-path
-
Updated
Jul 30, 2026 - Python
GhostHound is a BloodHound OpenGraph extension that surfaces Active Directory tombstone reanimation as a first-class attack path, enumerating deleted objects via SHOW_DELETED, mapping who can restore them, and revealing when a reanimated identity regains privileged group membership.
rust ldap active-directory bloodhound penetration-testing infosec opengraph pentest offensive-security red-team security-tools redteam active-directory-security attack-path
-
Updated
Aug 9, 2026 - Rust
The OWASP Subtractive Security Top 10 Project is an initiative to identify, document, and promote the highest-impact opportunities for reducing cyber risk through the elimination of attack paths.
owasp security-hardening security-architecture security-standards attack-graph attack-surface-management attack-path subtractive-security path-erasure
-
Updated
Sep 18, 2026
browser-based Active Directory attack graph tool for SharpHound and AzureHound collection data. No server. No install. No Neo4j. Upload a ZIP, get an interactive attack graph.
active-directory bloodhound cytoscape pentesting graph-visualization red-team sharphound reforged attack-path zrnge z-hound
-
Updated
Sep 15, 2026 - HTML
Open-source attack-path engine for AWS and Kubernetes: correlates your scanners into one graph and blocks the pull request that opens a route to your data.
kubernetes golang aws iam appsec vulnerability-management aws-security privilege-escalation security-tools devsecops cloud-security attack-graph sbom kubernetes-security supply-chain-security apache-age cnapp ci-cd-security mcp-server attack-path
-
Updated
Sep 22, 2026 - Go
Offline-first threat modeling and architecture diagram editor with AI-powered security analysis, MITRE ATT&CK/NIST mapping, local Ollama support, and integrated GRC attack-path workflows.
nist offline-first owasp cybersecurity grc threat-modeling risk-assessment threat-analysis security-architecture threat-intelligence diagram-editor data-flow-diagram mitre-attack architecture-diagrams reactflow local-llm ollama attack-path
-
Updated
Mar 22, 2026 - TypeScript
Python CLI for offensive-focused Azure situational awareness and management-plane reconnaissance.
azure iam azure-cli pentesting offensive-security privilege-escalation red-team security-tools reconnaissance cloud-security azure-security cloud-pentesting cloud-recon attack-path
-
Updated
Jun 22, 2026 - Python
BloodHound for AI agents — visualize attack paths through MCP tool chains
-
Updated
Apr 26, 2026 - Python
This is local defensive security toolkit with scanner, recon, honeypots, vulnerability correlation, evidence graph, attack path ranking, and reports.
python portfolio sqlite honeypot cybersecurity nmap recon cve nikto security-tools reconnaissance vulnerability-scanner blue-team defensive-security flet attack-path
-
Updated
Jul 19, 2026 - Python
Attack-path analysis for OPA policies. Finds the escalations that only show up when you look at the policy and the data together, and exports them as a BloodHound OpenGraph.
open-graph bloodhound opa privilege-escalation attack-surface attack-graph policy-as-code rego attack-path-analysis attack-path
-
Updated
Sep 21, 2026 - Go
Go CLI for attack-path-focused Azure reconnaissance, pivot analysis, and management-plane cloud security workflows.
azure iam azure-cli pentesting offensive-security privilege-escalation red-team security-tools reconnaissance cloud-security azure-security cloud-pentesting cloud-recon attack-path
-
Updated
Jul 10, 2026 - Go
Active Directory Attack Path Discovery Mapper — LDAP enumeration, privilege escalation analysis, and MITRE ATT&CK mapped remediation
python ldap nextjs active-directory bloodhound cybersecurity privilege-escalation security-tools attack-path
-
Updated
May 15, 2026 - TypeScript
Cross-tool correlation engine for the Entra ID security suite — joins findings across three scanners to surface risks no single tool detects.
python privilege-escalation security-automation azure-ad microsoft-graph identity-security entra-id attack-path secruity-tools
-
Updated
Sep 1, 2026 - Python
1337 Security Workbench — open security workstation and model-agnostic security execution, state, and evidence platform
python open-source cybersecurity penetration-testing infosec pentesting security-automation security-tools devsecops ai-agents security-engineering reachability-analysis ai-security attack-graph security-agents attack-path evidence-first security-workbench cyber-agent
-
Updated
Sep 22, 2026 - Python
Prove whether an internet-to-database attack path exists in your Terraform — before you apply.
-
Updated
Jul 27, 2026 - Python
AI-Powered Active Directory Attack Path Analysis with BloodHound - By Ayi NEDJIMI
python ai active-directory bloodhound cybersecurity penetration-testing pentesting red-team oscp mitre-attack attack-paths attack-path
-
Updated
Feb 18, 2026 - Python
HarrierOps Kube - offensive-focused Kubernetes recon and chaining CLI
go kubernetes k8s pentesting recon kubectl offensive-security red-team security-tools reconnaissance cloud-security security-research container-security kubernetes-security attack-path harrierops
-
Updated
Jun 22, 2026 - Go
Build reproducible cloud Cyber-Range Mazes with randomly selected CVEs for benchmarking Security Agents and RAG-assisted Attack-Path Research.
aws ansible benchmark reproducible-research terraform cybersecurity penetration-testing cve offensive-security security-automation research-infrastructure cloud-security vulnerability-research cyber-range rag security-agents llm adversarial-ai attack-path
-
Updated
Sep 15, 2026 - Python
Map AWS IAM permissions into a Neo4j graph for visual analysis
rust cli aws security-audit neo4j graph-database aws-iam privilege-escalation cloud-security attack-path
-
Updated
Sep 19, 2026 - Rust
Add this topic to your repo
To associate your repository with the attack-path topic, visit your repo's landing page and select "manage topics."