BadZure automates the deployment of intentionally misconfigured Entra ID tenants and Azure subscriptions, populating them with diverse entities and configurable, traversable attack paths.
-
Updated
Oct 2, 2026 - Python
#
attack-path
Here are 39 public repositories matching this topic...
Find the fix that breaks the most routes to Domain Admin. Maps Active Directory attack paths with evidence, compares remediation options side by side, and produces an offline report for red and blue teams. Complements BloodHound.
python active-directory bloodhound cybersecurity pentest red-team remediation security-tools blue-team active-directory-security attack-path
-
Updated
Nov 7, 2026 - Python
Salesforce identity and permission graph collector for BloodHound CE. Maps users, profiles, permission sets, roles, groups, sharing rules, connected apps, and field-level security into attack-path graphs.
python security identity graph permissions bloodhound penetration-testing salesforce aura attack-path
-
Updated
Jul 30, 2026 - Python
The OWASP Subtractive Security Top 10 Project is an initiative to identify, document, and promote the highest-impact opportunities for reducing cyber risk through the elimination of attack paths.
owasp security-hardening security-architecture security-standards attack-graph attack-surface-management attack-path subtractive-security path-erasure
-
Updated
Nov 5, 2026 - Python
Python CLI for offensive-focused Azure situational awareness and management-plane reconnaissance.
azure iam azure-cli pentesting offensive-security privilege-escalation red-team security-tools reconnaissance cloud-security azure-security cloud-pentesting cloud-recon attack-path
-
Updated
Jun 22, 2026 - Python
BloodHound for AI agents — visualize attack paths through MCP tool chains
-
Updated
Apr 26, 2026 - Python
This is local defensive security toolkit with scanner, recon, honeypots, vulnerability correlation, evidence graph, attack path ranking, and reports.
python portfolio sqlite honeypot cybersecurity nmap recon cve nikto security-tools reconnaissance vulnerability-scanner blue-team defensive-security flet attack-path
-
Updated
Nov 4, 2026 - Python
1337 Security Workbench — open security workstation and model-agnostic security execution, state, and evidence platform
python open-source cybersecurity penetration-testing infosec pentesting security-automation security-tools devsecops ai-agents security-engineering reachability-analysis ai-security attack-graph security-agents attack-path evidence-first security-workbench cyber-agent
-
Updated
Nov 9, 2026 - Python
Local attack surface and attack path analyzer for hosts and Docker environments.
cybersecurity vulnerability-assessment linux-security docker-security attack-surface windows-security attack-surface-management attack-path-analysis attack-path security-graph
-
Updated
Nov 5, 2026 - Python
Cross-tool correlation engine for the Entra ID security suite — joins findings across three scanners to surface risks no single tool detects.
python privilege-escalation security-automation azure-ad microsoft-graph identity-security entra-id attack-path secruity-tools
-
Updated
Sep 1, 2026 - Python
Finds the attack paths in a repository. Links Semgrep, Gitleaks, Trivy, Checkov and zizmor findings to your code, Kubernetes, cloud IAM (AWS, Azure, GCP) and GitHub Actions, and fails a pull request when it opens a way from the internet to your data.
kubernetes security terraform iac appsec sca sarif devsecops cloud-security sast mitre-attack github-actions trivy supply-chain-security semgrep attack-path
-
Updated
Nov 9, 2026 - Python
Deterministic security reasoning core: hash-chained evidence ledger, attack-path rule engine, fail-closed policy gate. LLMs produce evidence and explain decisions; they never cross the decision boundary.
python security cybersecurity audit-log formal-verification ai-safety policy-engine ai-agents zero-trust hash-chain tamper-evident llm-security fail-closed attack-path evidence-ledger
-
Updated
Nov 7, 2026 - Python
OT Asset Intelligence (Korea) — OT 자산 취약점·공격 경로 관리 플랫폼. Evidence-graded applicability (three-valued logic, 9 states), capability-transition attack paths, action queue with hard rules. On-premises, air-gapped first.
react python plc vulnerability-management ics-security three-valued-logic csaf fastapi air-gapped cisa-kev ot-security attack-path
-
Updated
Oct 5, 2026 - Python
Prove whether an internet-to-database attack path exists in your Terraform — before you apply.
-
Updated
Jul 27, 2026 - Python
A network security tool that analyzes hosts from an Nmap scan or YAML inventory, classifies them by role and sensitivity, and generates a least-privilege segmentation plan. It creates security zones, justified firewall rules, and compares attack paths before and after segmentation to show reduced lateral movement.
python cli analysis nmap threat-modeling network-security security-tools firewall-rules devsecops zero-trust least-privilege microsegmentation infrastructure-security lateral-movement network-segmentation attack-path
-
Updated
Jun 18, 2026 - Python
VANTA — a red-team-minded penetration testing & bug-bounty framework. Scope guard that fails closed, attack-path correlation, MITRE ATT&CK mapping, and hash-chained evidence custody. Zero dependencies.
python security cybersecurity penetration-testing bug-bounty offensive-security red-team cvss mitre-attack attack-path
-
Updated
Oct 31, 2026 - Python
Offline, graph-based analysis of AWS IAM permissions and network exposure, with evidence-backed attack paths and least-privilege remediation
-
Updated
Oct 28, 2026 - Python
AI-Powered Active Directory Attack Path Analysis with BloodHound - By Ayi NEDJIMI
python ai active-directory bloodhound cybersecurity penetration-testing pentesting red-team oscp mitre-attack attack-paths attack-path
-
Updated
Feb 18, 2026 - Python
Build reproducible cloud Cyber-Range Mazes with randomly selected CVEs for benchmarking Security Agents and RAG-assisted Attack-Path Research.
aws ansible benchmark reproducible-research terraform cybersecurity penetration-testing cve offensive-security security-automation research-infrastructure cloud-security vulnerability-research cyber-range rag security-agents llm adversarial-ai attack-path
-
Updated
Oct 19, 2026 - Python
Context-aware vulnerability prioritization with attack-path chaining. Self-hosted, no lock-in, swap any scanner.
python security cloudformation terraform self-hosted threat-modeling appsec vulnerability-management sca devsecops cloud-security dast sbom attack-path-analysis attack-path vulnerability-prioritization
-
Updated
Jun 12, 2026 - Python
Add this topic to your repo
To associate your repository with the attack-path topic, visit your repo's landing page and select "manage topics."