awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
adaptivethreat avatar

adaptivethreat/Bloodhound

0
View on GitHub↗
10,552 stars·1,795 forks·PowerShell·GPL-3.0·19 views

Bloodhound

Bloodhound is an Active Directory attack path mapper and security auditor designed to visualize trust relationships and permission chains. It serves as an attack surface management tool that identifies paths to domain administrator and other high-privileged accounts.

The project uses a graph database analyzer to map complex identity and access relationships. It quantifies the risk of privilege escalation by identifying misconfigured permissions and trust links within Windows domains.

The system provides capabilities for Active Directory security analysis, identity and access auditing, and network attack path visualization to detect potential security vulnerabilities.

Features

  • Active Directory Security Tools - Provides specialized utilities for identifying and addressing security vulnerabilities within Active Directory infrastructure.
  • Attack Path Mappers - Visualizes trust relationships and permission chains in Active Directory to identify paths to domain administrator.
  • Attack Path Graphs - Maps Active Directory objects and trust relationships into a directed graph to identify potential attack paths.
  • Access Auditing - Reviews domain user and group memberships to ensure the principle of least privilege is maintained.
  • Attack Path Visualizations - Visualizes the sequence of steps an attacker could take to escalate privileges and compromise a target system.
  • Attack Path Visualizations - Provides graph-based visualizations of trust relationships to identify the easiest routes for system compromise.
  • Privilege Escalation Analysis - Creates edges in the graph by analyzing Access Control Lists and group memberships to infer potential privilege escalation.
  • Privilege Escalation Tools - Identifies misconfigured permissions and trust links that allow unauthorized administrative access.
  • Graph Databases - Leverages a graph database to store and analyze highly connected identity and access relationships.
  • Graph Querying - Uses Neo4j for complex graph querying and multi-hop traversal of identity relationships.
  • Shortest Path Algorithms - Implements shortest path algorithms to find the most efficient route from low-privileged users to administrative accounts.
  • Attack Surface Analysis - Quantifies risk by mapping and analyzing the exposed internal attack surface based on directory configurations.
  • LDAP Security Data Collection - Retrieves user, group, and computer attributes via LDAP queries to build an environment security model.
  • Windows Security Utilities - Visualizes Active Directory trust relationships and attack paths.

Star history

Star history chart for adaptivethreat/bloodhoundStar history chart for adaptivethreat/bloodhound

How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Frequently asked questions

What does adaptivethreat/bloodhound do?

Bloodhound is an Active Directory attack path mapper and security auditor designed to visualize trust relationships and permission chains. It serves as an attack surface management tool that identifies paths to domain administrator and other high-privileged accounts.

What are the main features of adaptivethreat/bloodhound?

The main features of adaptivethreat/bloodhound are: Active Directory Security Tools, Attack Path Mappers, Attack Path Graphs, Access Auditing, Attack Path Visualizations, Privilege Escalation Analysis, Privilege Escalation Tools, Graph Databases.

Which projects share features with adaptivethreat/bloodhound?

Projects with overlapping indexed features include: bloodhoundad/bloodhound — BloodHound is a graph-based security analysis tool designed to map trust relationships and attack vectors within… specterops/bloodhound — BloodHound is an identity risk management platform and graph-based attack path analyzer used to map identity… falkordb/falkordb — FalkorDB is a high-performance graph database management system and vector graph database. It serves as a knowledge… kuzudb/kuzu — Kùzu is an embedded property graph database engine designed for high-performance analytical queries and local data… toniblyx/prowler — Prowler is a multi-cloud security scanner and security posture management tool. It automates security and compliance… cayleygraph/cayley — Cayley is a graph database engine designed for storing and querying interconnected data using a quad-based data model.…

Projects sharing features with Bloodhound

These projects share indexed features with Bloodhound. Shared tags can include platform or build tooling; verify the primary use case before treating a result as a replacement.
  • bloodhoundad/bloodhoundBloodHoundAD avatar

    BloodHoundAD/BloodHound

    10,552View on GitHub↗

    BloodHound is a graph-based security analysis tool designed to map trust relationships and attack vectors within Active Directory environments. It functions as an attack path mapper and risk assessment system that uses graph theory to identify hidden relationships and paths leading to high-privilege accounts. The tool specializes in network attack surface mapping and privilege escalation pathfinding. It quantifies security risks by measuring the reliability of attack paths to critical targets, allowing for the prioritization of vulnerability elimination. The system provides capabilities for

    PowerShell
    View on GitHub↗10,552
  • specterops/bloodhoundSpecterOps avatar

    SpecterOps/BloodHound

    2,789View on GitHub↗

    BloodHound is an identity risk management platform and graph-based attack path analyzer used to map identity relationships and permissions in Active Directory. It functions as a security tool for auditing directory services, uncovering unintended privilege relationships, and visualizing sequences of permissions that can lead to domain compromise. The project differentiates itself as a comprehensive adversary emulation framework that coordinates remote agents and executes post-exploitation commands. It includes a reverse proxy for bypassing multi-factor authentication via real-time session hij

    Go
    View on GitHub↗2,789
  • falkordb/falkordbFalkorDB avatar

    FalkorDB/FalkorDB

    3,437View on GitHub↗

    FalkorDB is a high-performance graph database management system and vector graph database. It serves as a knowledge graph construction tool and a GraphRAG knowledge store, integrating structured property graphs with vector search to provide grounded context for large language models. The engine is designed as a multi-tenant graph engine, capable of hosting thousands of isolated datasets within a single instance. The system distinguishes itself by using linear algebra for query execution, treating relationship tensors as matrix multiplications to achieve low-latency multi-hop traversals. It ut

    Ccloud-databasedatabasedatabase-as-a-service
    View on GitHub↗3,437
  • kuzudb/kuzukuzudb avatar

    kuzudb/kuzu

    3,965View on GitHub↗

    Kùzu is an embedded property graph database engine designed for high-performance analytical queries and local data management. It operates as a library within the host application process, utilizing a columnar-based storage architecture and just-in-time query compilation to execute complex graph traversals and pattern matching efficiently. By mapping database files directly into system memory, it ensures data durability and high-speed access while maintaining ACID-compliant transactional integrity. The engine distinguishes itself by integrating vector similarity search and full-text search di

    C++cypherdatabaseembeddable
    View on GitHub↗3,965
Compare all 30 related projects→