Awesome GitHub RepositoriesAttack Path Visualizations

Prowler is a multi-cloud security posture management platform and vulnerability scanner. It provides tools for automating security audits, evaluating cloud infrastructure against regulatory compliance frameworks, and managing security assessments through a dedicated analysis dashboard. The project distinguishes itself by providing an AI-driven security context server that feeds structured data to AI assistants for automated risk analysis. It also employs graph-based attack path mapping to visualize potential lateral movement and exploitation routes across cloud inventories. The platform cove

Prowler is a multi-cloud security scanner and security posture management tool. It automates security and compliance assessments across multiple cloud environments to identify misconfigurations and vulnerabilities. The project provides a multi-cloud security analysis engine that operates as an automated auditor, evaluating infrastructure against industry-standard regulatory frameworks and security benchmarks. It features a cloud security visualization dashboard that uses a graph database to map cloud inventory and visualize potential attack paths. Capabilities include automated cloud infrast

BloodHound is a graph-based security analysis tool designed to map trust relationships and attack vectors within Active Directory environments. It functions as an attack path mapper and risk assessment system that uses graph theory to identify hidden relationships and paths leading to high-privilege accounts. The tool specializes in network attack surface mapping and privilege escalation pathfinding. It quantifies security risks by measuring the reliability of attack paths to critical targets, allowing for the prioritization of vulnerability elimination. The system provides capabilities for

Bloodhound is an Active Directory attack path mapper and security auditor designed to visualize trust relationships and permission chains. It serves as an attack surface management tool that identifies paths to domain administrator and other high-privileged accounts. The project uses a graph database analyzer to map complex identity and access relationships. It quantifies the risk of privilege escalation by identifying misconfigured permissions and trust links within Windows domains. The system provides capabilities for Active Directory security analysis, identity and access auditing, and ne

ThreatMapper هي منصة حماية تطبيقات سحابية أصلية وماسح ضوئي لأمان البنية التحتية. تعمل كنظام لإدارة الثغرات وجامع بيانات تتبع البنية التحتية السحابية مصمم لمراقبة أعباء العمل واكتشاف مخاطر الأمان عبر بيئات السحابة والحاويات. تتميز المنصة بمصور حركة مرور الشبكة الذي يستخدم التعلم الآلي لتصنيف أنماط الاتصال ونظام رسم خرائط الهجوم القائم على الرسم البياني لتحديد المسارات عالية المخاطر بين الثغرات وتبعيات الشبكة. تغطي قدراتها الأوسع تدقيق امتثال البنية التحتية السحابية مقابل معايير الأمان، واكتشاف تهديدات الإنتاج للبرمجيات الضارة والأسرار المكشوفة، وجمع حزم الشبكة وبيانات تتبع أعباء العمل عبر مستشعرات موزعة. تتم إدارة نشر مكونات المسح عبر بيئات السحابة، والعناقيد، والأجهزة الافتراضية من خلال أدوات الحاويات والبنية التحتية ككود.