Tool for building Kubernetes attack paths
[TDSC 2021] IntruSion alert-driven Attack Graph Extractor. https://ieeexplore.ieee.org/document/9557854
A Graph Neural Network-based Intrusion Detection System
The OWASP Subtractive Security Top 10 Project is an initiative to identify, document, and promote the highest-impact opportunities for reducing cyber risk through the elimination of attack paths.
A Flipper Zero that stops guessing and starts reasoning: ML-guided RFID/NFC fuzzing & access-control auditing that turns raw card reads into a prioritized, explainable security assessment. Defensive-use only.
Autonomous offensive security agent. Plans engagements, runs recon, chains exploits, and writes reports - end to end. Native to Claude Code, Gemini CLI, Codex and Cursor. Not a scanner wrapper.
Enterprise-grade vulnerability management platform with AI-powered analysis, interactive attack graph visualization (NetworkX), and intelligent chatbot for security consultation. Integrates OpenCTI threat intelligence.
Local-first offensive security engagement platform for mapping assets, credentials, sessions, pivots, findings, evidence, and attack paths.
AAPP-MART is a cybersecurity engine featuring AI-powered autonomous attack path prediction and multi-agent red team simulation. These features include adversary emulation, attack path analysis, threat modeling, security validation, risk assessment, and MITRE ATT&CK alignment.
Open-source security intelligence engine for developers. Orchestrates nmap, nikto, semgrep, whatweb, trivy, cortex-crawler & curl. Builds attack graphs, narrates risk, and generates fixes. Runs fully locally, without any cost
Cyber-physical attack-graph generator for smart grids: chains recon → network → ICS/physical impact and ranks defensive chokepoints. Defensive research only.
Open-source attack-path engine for AWS and Kubernetes: correlates your scanners into one graph and blocks the pull request that opens a route to your data.
Real-Time Detection of Multi-Stage Attacks using Kill Chain State Machines: Detect multi-stage attacks by correlating alerts from Intrusion Detection Systems (IDS) to reconstruct attacks. By prioritising alerts based on the kill chain model the RT-KCSM reduces false-positive alerts.
Hybrid LSTM-Markov attack chain forecasting for MITRE ATT&CK. Learns from 4,849 campaign chains + 8,437 real intrusion traces. Generates 26,051 risk-ranked multi-step attack futures via constrained beam search. 86% next-step accuracy, 0.76 Pearson correlation with NCISS severity. SECRYPT 2026 submission.
Static + plan-time Terraform security analysis with attack-graph prioritisation, MITRE ATT&CK mapping, and one-click PR fix suggestions. 215 rules, 100% fix_hcl coverage.
WSTG tells you what to cover. This tells you what the tests inside each line actually are: the procedure, the oracle that separates a real result from the thing that imitates it, and where a success can lead. One offline, self-contained HTML file — no server, no install, no network.
Visual IAM attack graph for AWS. Instantly analyze permissions, detect privilege-escalation risks, and audit IAM roles — locally, securely.
Attack-path analysis for OPA policies. Finds the escalations that only show up when you look at the policy and the data together, and exports them as a BloodHound OpenGraph.
To associate your repository with the attack-graph topic, visit your repo's landing page and select "manage topics."