attack-paths

Bloodhound Reporting for Blue and Purple Teams

Tool for building Kubernetes attack paths

Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI services. BloodHound for the agentic stack.

Neo4LDAP is a query and visualization tool focused on Active Directory environments. It combines LDAP syntax with graph-based data analysis in Neo4j, offering an alternative approach to tools like BloodHound.

Based on Lightspin proprietary data, research, and our tracking of cloud security trends in the market, our research team has compiled a list of the 2022 Top 7 Cloud Attack Paths across AWS, Azure, GCP, and Kubernetes as seen on the Lightspin Cloud Native Application Protection Platform.

Detection-aware BloodHound attack-path scoring - find the quietest route to your objective, calibrated across audit/EDR/SIEM tiers.

An enhanced version of Microsoft CyberBattleSim incorporating an embedding model to support continuous spaces for the RL task, an extended scenario generation pipeline, and a unified framework for RL training and evaluation [Black Hat Asia 2026 Arsenal]

Security for AI agents & MCP — map how MCP servers, skills, and memory chain into exposure paths. Toxic-flow detection, cross-surface graph, drift & policy-as-code. Local-only, no telemetry.

Azure AD based infra APM

Active Directory attack path enumerator — single binary, no BloodHound required

AI-Powered Active Directory Attack Path Analysis with BloodHound - By Ayi NEDJIMI

macOS security evidence collection and Neo4j analysis tools with separate red- and blue-team packages.

🔍 Identify Active Directory vulnerabilities and attack paths quickly with Hackles, a fast CLI tool featuring 166 security queries for effective assessments.

This project explores how interactive ATT&CK traversal can assist human analysts in reasoning about attack progression. Rather than static ATT&CK mapping, it focuses on analyst-guided exploration of attacker behavior across tactics.

AttackPathCanvas — Visualize Identity Attack Paths in Active Directory

Go library for BloodHound structured OpenGraph, the kind the UI can do pathfinding on. Payloads, extension definition schemas, and signed API requests. Standard library only.

Kubernetes attack-surface, posture & compliance scanner. detect -> chain -> harden. Offline-first, read-only, ATT&CK-tagged attack paths.