attack-paths

Bloodhound Reporting for Blue and Purple Teams

Tool for building Kubernetes attack paths

Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI services. BloodHound for the agentic stack.

Neo4LDAP is a query and visualization tool focused on Active Directory environments. It combines LDAP syntax with graph-based data analysis in Neo4j, offering an alternative approach to tools like BloodHound.

Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/Elastic/MDI/WDAC) plus Azure.

Based on Lightspin proprietary data, research, and our tracking of cloud security trends in the market, our research team has compiled a list of the 2022 Top 7 Cloud Attack Paths across AWS, Azure, GCP, and Kubernetes as seen on the Lightspin Cloud Native Application Protection Platform.

An enhanced version of Microsoft CyberBattleSim incorporating an embedding model to support continuous spaces for the RL task, an extended scenario generation pipeline, and a unified framework for RL training and evaluation [Black Hat Asia 2026 Arsenal]

Azure AD based infra APM

Security for AI agents & MCP — map how MCP servers, skills, and memory chain into exposure paths. Toxic-flow detection, cross-surface graph, drift & policy-as-code. Local-only, no telemetry.

Active Directory attack path enumerator — single binary, no BloodHound required

Find the routes to Domain Admin your monitoring would not catch — without your Active Directory data ever leaving the machine.

AI-Powered Active Directory Attack Path Analysis with BloodHound - By Ayi NEDJIMI

Open-source CNAPP blueprint: security graph, attack paths & issue triage on a realistic simulated multi-cloud estate. 100% free, Apache-2.0.

AttackPathCanvas — Visualize Identity Attack Paths in Active Directory

🔍 Identify Active Directory vulnerabilities and attack paths quickly with Hackles, a fast CLI tool featuring 166 security queries for effective assessments.

Everyone tells you your blast radius. This computes the minimum-cost set of actions that provably severs a compromised identity from the crown jewels — with a max-flow optimality certificate.

macOS security evidence collection and Neo4j analysis tools with separate red- and blue-team packages.

Go library for BloodHound structured OpenGraph, the kind the UI can do pathfinding on. Payloads, extension definition schemas, and signed API requests. Standard library only.

Read-only Microsoft Entra application relationship explorer for IAM attack paths, evidence, and remediation

Shadow-admin discovery across AWS + Azure, scoring CyberArk SkyArk against known escalation paths