BadZure automates the deployment of intentionally misconfigured Entra ID tenants and Azure subscriptions, populating them with diverse entities and configurable, traversable attack paths.
-
Updated
Aug 27, 2026 - Python
#
attack-path
Here are 40 public repositories matching this topic...
Salesforce identity and permission graph collector for BloodHound CE. Maps users, profiles, permission sets, roles, groups, sharing rules, connected apps, and field-level security into attack-path graphs.
python security identity graph permissions bloodhound penetration-testing salesforce aura attack-path
-
Updated
Jul 30, 2026 - Python
GhostHound is a BloodHound OpenGraph extension that surfaces Active Directory tombstone reanimation as a first-class attack path, enumerating deleted objects via SHOW_DELETED, mapping who can restore them, and revealing when a reanimated identity regains privileged group membership.
rust ldap active-directory bloodhound penetration-testing infosec opengraph pentest offensive-security red-team security-tools redteam active-directory-security attack-path
-
Updated
Aug 9, 2026 - Rust
The OWASP Subtractive Security Top 10 Project is an initiative to identify, document, and promote the highest-impact opportunities for reducing cyber risk through the elimination of attack paths.
owasp security-hardening security-architecture security-standards attack-graph attack-surface-management attack-path subtractive-security path-erasure
-
Updated
Aug 19, 2026
browser-based Active Directory attack graph tool for SharpHound and AzureHound collection data. No server. No install. No Neo4j. Upload a ZIP, get an interactive attack graph.
active-directory bloodhound cytoscape pentesting graph-visualization red-team sharphound reforged attack-path zrnge z-hound
-
Updated
Apr 27, 2026 - HTML
Offline-first threat modeling and architecture diagram editor with AI-powered security analysis, MITRE ATT&CK/NIST mapping, local Ollama support, and integrated GRC attack-path workflows.
nist offline-first owasp cybersecurity grc threat-modeling risk-assessment threat-analysis security-architecture threat-intelligence diagram-editor data-flow-diagram mitre-attack architecture-diagrams reactflow local-llm ollama attack-path
-
Updated
Mar 22, 2026 - TypeScript
Finds the reachable paths from internet exposure, through excessive privilege, to a sensitive asset, by correlating the scanners you already run into one live graph of your environment. Flags them in the pull request that opens them and ships the fix as a PR. Open source, Apache-2.0.
react graphql kubernetes golang open-source aws security azure supply-chain appsec devsecops sast attack-graph sbom cspm apache-age cnapp attack-path
-
Updated
Sep 1, 2026 - Go
Python CLI for offensive-focused Azure situational awareness and management-plane reconnaissance.
azure iam azure-cli pentesting offensive-security privilege-escalation red-team security-tools reconnaissance cloud-security azure-security cloud-pentesting cloud-recon attack-path
-
Updated
Jun 22, 2026 - Python
BloodHound for AI agents — visualize attack paths through MCP tool chains
-
Updated
Apr 26, 2026 - Python
This is local defensive security toolkit with scanner, recon, honeypots, vulnerability correlation, evidence graph, attack path ranking, and reports.
python portfolio sqlite honeypot cybersecurity nmap recon cve nikto security-tools reconnaissance vulnerability-scanner blue-team defensive-security flet attack-path
-
Updated
Jul 19, 2026 - Python
Go CLI for attack-path-focused Azure reconnaissance, pivot analysis, and management-plane cloud security workflows.
azure iam azure-cli pentesting offensive-security privilege-escalation red-team security-tools reconnaissance cloud-security azure-security cloud-pentesting cloud-recon attack-path
-
Updated
Jul 10, 2026 - Go
Active Directory Attack Path Discovery Mapper — LDAP enumeration, privilege escalation analysis, and MITRE ATT&CK mapped remediation
python ldap nextjs active-directory bloodhound cybersecurity privilege-escalation security-tools attack-path
-
Updated
May 15, 2026 - TypeScript
Prove whether an internet-to-database attack path exists in your Terraform — before you apply.
-
Updated
Jul 27, 2026 - Python
Cross-tool correlation engine for the Entra ID security suite — joins findings across three scanners to surface risks no single tool detects.
python privilege-escalation security-automation azure-ad microsoft-graph identity-security entra-id attack-path secruity-tools
-
Updated
Aug 29, 2026 - Python
Map AWS IAM permissions into a Neo4j graph for visual analysis
rust cli aws security-audit neo4j graph-database aws-iam privilege-escalation cloud-security attack-path
-
Updated
Aug 29, 2026 - Rust
HarrierOps Kube - offensive-focused Kubernetes recon and chaining CLI
go kubernetes k8s pentesting recon kubectl offensive-security red-team security-tools reconnaissance cloud-security security-research container-security kubernetes-security attack-path harrierops
-
Updated
Jun 22, 2026 - Go
AI-Powered Active Directory Attack Path Analysis with BloodHound - By Ayi NEDJIMI
python ai active-directory bloodhound cybersecurity penetration-testing pentesting red-team oscp mitre-attack attack-paths attack-path
-
Updated
Feb 18, 2026 - Python
Build reproducible cloud Cyber-Range Mazes with randomly selected CVEs for benchmarking Security Agents and RAG-assisted Attack-Path Research.
aws ansible benchmark reproducible-research terraform cybersecurity penetration-testing cve offensive-security security-automation research-infrastructure cloud-security vulnerability-research cyber-range rag security-agents llm adversarial-ai attack-path
-
Updated
Jul 14, 2026 - Python
Explainable GCP IAM authorization and attack-path analyzer with inherited deny policies, three-state decisions, SARIF reporting, and CI.
python iam gcp privilege-escalation policy-analysis sarif security-engineering cloud-security identity-security attack-path
-
Updated
Aug 30, 2026 - Python
Real-time cloud attack path prediction and simulation
aws-security multi-cloud security-automation cloud-security azure-security threat-detection gcp-security attack-path
-
Updated
Jan 18, 2026 - Python
Add this topic to your repo
To associate your repository with the attack-path topic, visit your repo's landing page and select "manage topics."