𝗔𝗔𝗣𝗣‑𝗠𝗔𝗥𝗧 is an open-source python security engine for AI-powered attack-path prediction, autonomous multi-agent red-team simulation, threat modeling, adversary emulation, attack path analysis, vulnerability assessment, risk assessment, risk scoring, and MITRE ATT&CK security validation.

Cloud Identity Security Engineering — Go-based security research and tooling for AWS IAM attack-path analysis, privilege escalation detection, and CloudTrail-based detection engineering.

Cloud Security Posture Management (CSPM) platform that maps AWS misconfigurations to MITRE ATT&CK techniques, attack paths, blast radius risk, and CIS/NIST/SOC2/PCI compliance controls.

A graph-first, agentic security framework for AWS that models cloud environments as attack graphs. Leverages LangGraph and Neo4j to perform recursive attack path analysis and autonomous remediation reasoning. Designed for the 'Assumed Breach' era.

This repository contains a vulnerability scanner mapped to the MITRE ATT&CK framework, featuring an animated, single-page web dashboard. Core Technologies: Python, Flask, Nmap (python-nmap), HTML/CSS/JS.

Context-aware vulnerability prioritization with attack-path chaining. Self-hosted, no lock-in, swap any scanner.

Graph-based cyber attack propagation and blast radius simulator for enterprise environments. Models lateral movement, privilege escalation, and remediation impact using attack graphs.

SAGE - An autonomous AI-assisted application security platform that converts repositories into interactive knowledge graphs, correlates NVD CVEs with code-level reachability, performs exploitability analysis using LLMs, generates remediation patches, validates fixes through testing and Semgrep, and automatically creates GitHub pull requests

BloodHound Attack Path Enumerator

High-signal, read-only IAM analysis tool that detects privilege escalation paths via Service Account impersonation and trust overlap in Google Cloud.

Monitor your cloud assets.

Active Directory attack-path analysis lab simulating an internal penetration test. Includes LDAP, Kerberos, SMB enumeration, BloodHound graph analysis, privilege escalation reasoning, and professional documentation of security misconfigurations in a controlled lab environment.

Research-preview AWS IAM reasoning tool with bounded evidence, deterministic findings, and explicit non-claims.

Multi-cloud security audit tool designed to visualize attack paths, identify public exposure, and analyze Blast Radius using Neo4j graph database.

PivotMap is an open-source attack path intelligence engine for offensive security teams. It ingests scan results, correlates vulnerabilities, builds a directed attack graph, and identifies realistic compromise paths. PivotMap focuses on reasoning, not scanning.

위협 경로 탐색기

Offline-first AWS IAM attack-path analysis engine

Defensive AD and Microsoft Entra ID exposure analyzer with identity risk detections, app permission review, Conditional Access checks, graph-based privilege paths and JSON reports.