attack-path-analysis

BloodHound-style risk analysis for multi-agent AI architectures. Parses CrewAI, Dify, LangGraph, or generic YAML into a typed capability graph and detects reachable attack paths from untrusted input to sensitive data or external action, with live control simulation.

AAPP-MART is a cybersecurity engine featuring AI-powered autonomous attack path prediction and multi-agent red team simulation. These features include adversary emulation, attack path analysis, threat modeling, security validation, risk assessment, and MITRE ATT&CK alignment.

Attack-path analysis for OPA policies. Finds the escalations that only show up when you look at the policy and the data together, and exports them as a BloodHound OpenGraph.

Visualize Active Directory attack paths, map them to MITRE ATT&CK coverage, and expose detection gaps in a safe synthetic SOC demo.

Cloud Identity Security Engineering — Go-based security research and tooling for AWS IAM attack-path analysis, privilege escalation detection, and CloudTrail-based detection engineering.

Enterprise cloud attack path analysis platform using Neo4j graph databases, Cypher queries, and AI to map cloud assets, uncover lateral movement paths, identify toxic privilege combinations, and accelerate cloud security investigations.

SAGE - An autonomous AI-assisted application security platform that converts repositories into interactive knowledge graphs, correlates NVD CVEs with code-level reachability, performs exploitability analysis using LLMs, generates remediation patches, validates fixes through testing and Semgrep, and automatically creates GitHub pull requests

Cloud Security Posture Management (CSPM) platform that maps AWS misconfigurations to MITRE ATT&CK techniques, attack paths, blast radius risk, and CIS/NIST/SOC2/PCI compliance controls.

This repository contains a vulnerability scanner mapped to the MITRE ATT&CK framework, featuring an animated, single-page web dashboard. Core Technologies: Python, Flask, Nmap (python-nmap), HTML/CSS/JS.

A comprehensive graph-based attack path analysis tool that identifies hidden privilege escalation routes, blast radius zones, and critical chokepoints in Kubernetes clusters using classical graph algorithms and AI-powered threat narratives.

Provider-neutral cloud attack-path and misconfiguration prioritization engine — graph-based exposure scoring, trust-relationship modeling, and explainable remediation

위협 경로 탐색기

BloodHound Attack Path Enumerator

Top Attack Path Analysis 🌟 Star if you like it! 🌟

PivotMap is an open-source attack path intelligence engine for offensive security teams. It ingests scan results, correlates vulnerabilities, builds a directed attack graph, and identifies realistic compromise paths. PivotMap focuses on reasoning, not scanning.

Top Identity Threat Detection & Response (ITDR) (Opensource) 🌟 Star if you like it! 🌟

Local attack surface and attack path analyzer for hosts and Docker environments.

High-signal, read-only IAM analysis tool that detects privilege escalation paths via Service Account impersonation and trust overlap in Google Cloud.

Monitor your cloud assets.

Multi-cloud security audit tool designed to visualize attack paths, identify public exposure, and analyze Blast Radius using Neo4j graph database.