Tool for building Kubernetes attack paths
[TDSC 2021] IntruSion alert-driven Attack Graph Extractor. https://ieeexplore.ieee.org/document/9557854
A Graph Neural Network-based Intrusion Detection System
The OWASP Subtractive Security Top 10 Project is an initiative to identify, document, and promote the highest-impact opportunities for reducing cyber risk through the elimination of attack paths.
A Flipper Zero that stops guessing and starts reasoning: ML-guided RFID/NFC fuzzing & access-control auditing that turns raw card reads into a prioritized, explainable security assessment. Defensive-use only.
Autonomous offensive security agent. Plans engagements, runs recon, chains exploits, and writes reports - end to end. Native to Claude Code, Gemini CLI, Codex and Cursor. Not a scanner wrapper.
Local-first offensive security engagement platform for mapping assets, credentials, sessions, pivots, findings, evidence, and attack paths.
Synthesize realistic Active Directory, Entra ID and hybrid identity attack graphs for Neo4j and BloodHound CE (DSN 2024)
Enterprise-grade vulnerability management platform with AI-powered analysis, interactive attack graph visualization (NetworkX), and intelligent chatbot for security consultation. Integrates OpenCTI threat intelligence.
Open-source security intelligence engine for developers. Orchestrates nmap, nikto, semgrep, whatweb, trivy, cortex-crawler & curl. Builds attack graphs, narrates risk, and generates fixes. Runs fully locally, without any cost
AAPP-MART is a cybersecurity engine featuring AI-powered autonomous attack path prediction and multi-agent red team simulation. These capabilities include adversary emulation, threat modeling, security validation, risk assessment, and MITRE ATT&CK alignment.
Open source attack-path engine for AWS and Kubernetes: correlates your scanners into one graph and blocks the pull request that opens a route to your data.
Cyber-physical attack-graph generator for smart grids: chains recon → network → ICS/physical impact and ranks defensive chokepoints. Defensive research only.
Hybrid LSTM-Markov attack chain forecasting for MITRE ATT&CK. Learns from 4,849 campaign chains + 8,437 real intrusion traces. Generates 26,051 risk-ranked multi-step attack futures via constrained beam search. 86% next-step accuracy, 0.76 Pearson correlation with NCISS severity. SECRYPT 2026 submission.
Real-Time Detection of Multi-Stage Attacks using Kill Chain State Machines: Detect multi-stage attacks by correlating alerts from Intrusion Detection Systems (IDS) to reconstruct attacks. By prioritising alerts based on the kill chain model the RT-KCSM reduces false-positive alerts.
Agent-native incident investigation graph: analysts and AI agents (MCP/REST) link evidence from EDR, Entra ID, cloud and GitHub logs into one shared, real-time attack graph and timeline. Self-hosted, no database.
Visual IAM attack graph for AWS. Instantly analyze permissions, detect privilege-escalation risks, and audit IAM roles — locally, securely.
Cold Relay is a single-binary Active Directory security assessment tool that collects Windows authentication evidence across LDAP, Kerberos, SMB, DNS, GPO, delegation, certificate services, and more turning evidence into deterministic findings with an offline attack graph.
To associate your repository with the attack-graph topic, visit your repo's landing page and select "manage topics."