BoxPwnr-Traces

BoxPwnr-Traces BoxPwnr의 추적 및 벤치마크 결과로, 여러 보안 플랫폼에 걸쳐 있습니다. 각 추적에는 전체 LLM 상호작용, 실행된 명령어, 마크다운 보고서 + 공격 그래프, 통계 및 사용된 구성이 포함됩니다. 리더보드를 탐색하고, 대화형 웹 뷰어에서 실행을 재생하며, AI 생성 보고서를 읽어보세요: 🔬 BoxPwnr Traces& Benchmarks 플랫폼| 해결됨| 완료율| 추적 수 ---|---|---|--- HTB Starting Point| 25/25| | 770 HTB Labs| 268/526| |...

Adalanche

Adalanche 오픈 소스 공격 그래프 시각화 및 탐색기 Adalanche는 Active Directory에서 사용자와 그룹이 가진 권한을 즉시 보여줍니다. 계정, 머신 또는 전체 도메인을 장악할 수 있는 사람을 시각화하고 탐색하는 데 유용하며, 잘못된 구성을 찾아 표시하는 데 사용할 수 있습니다. 도메인 관리자가 될 수 있나요? Active Directory 보안은 악명 높게 어렵습니다. 소규모 조직은 일반적으로 자신이 무엇을 하고 있는지 전혀 모르며, 너무 많은 사람들이 도메인 관리자에 추가되어 있습니다. 대규모 조직에는...

Stormspotter

Stormspotterは、Azureサブスクリプション内のリソースの「攻撃グラフ」を作成します。これにより、レッドチームやペネトレーションテスターはテナント内の攻撃対象領域とピボットの機会を可視化でき、防御側の担当者はインシデント対応作業を迅速に方向付け、優先順位付けできるようになります。 インストール Dockerを使う場合 ほとんどのユーザーはDocker経由でStormspotterをインストールする方が簡単だと感じるでしょう。これが推奨される方法です。 git clone https://github.com/Azure/Stormspotter docker-compose ...

RAGE

RAGE - Relational Attack Graph Exchange 実際に他人に渡すことができる攻撃グラフ。 グラフベースのセキュリティ製品はすべて、攻撃グラフを独自のストアに閉じ込めてしまいます。エクスポートもできず、2つのスキャンをdiffすることも、バージョン管理に置くことも、ベンダー自身のUI以外でクエリすることもできません。エンゲージメントが終われば、グラフも一緒に去ってしまいます。 RAGEは、オフェンシブセキュリティグラフのためのベンダー中立なファイルフォーマット...

Bounded Reasoning: Cognitive Hierarchy in Human-Versus-AI Cyber Defense

Human-agent evaluations often compress interaction into a single performance score, even when human and automated policies adapt differently over time. We study this in a sequential cyber-defense game on an attack graph, where a human or reinforcement-learning defender protects cloud assets again...

AI-Based Vulnerability Assessment Capability and Cyber Attack Graph Analysis

Cyber threats targeting mission-critical infrastructure are becoming more sophisticated while the barrier to launching attacks continues to fall. Traditional point solutions like antivirus and firewalls are reactive and fail to address the combinatorial complexity of modern attack surfaces. This...

Automating Attack Graph Construction for Agentic Pentesting. Towards Neuro-Symbolic Vulnerability Hunting

Logic attack graphs grounded in scanner output provide explicit and auditable attack path reasoning LLM-based agents lack. Integrating symbolic frameworks such as MulVAL to contemporary security workflows or agentic pipelines, however, requires translating scanner evidence to initial facts, and...

Merging Cyber Threat Intelligence through Retrieval-Augmented Generation and Small Language Models for Rich Threat Representation

Modern cybersecurity operations rely on CTI collected from heterogeneous sources, including semi-structured threat representations, IoCs, and narrative technical reports. However, these artifacts are often insufficient in isolation to reconstruct how an attack unfolds, under which conditions each...

From Security Events to Conflict States: A Three-Layer Cyber Defense Scenario Model for Enhanced Cyber Situational Awareness

Cyber defense in mission-critical environments requires integrated approaches capable of representing adversarial progression, defender-side uncertainty, mission impact, and defensive decision support within a unified framework. In operational domains, defenders must continuously estimate the...

MazeRunner: Nonlinear Task and Clue Orchestration for LLM-Driven Black-Box Automated Penetration Testing

Penetration testing is essential yet resource-intensive. Although large language models LLMs show promise for automating security auditing, existing agents mainly execute end-to-end workflows in simplified linear scenarios. Real-world black-box testing is fundamentally nonlinear: the attack graph...

Practical Graph Optimisation and AI-Driven Models for Active Directory Security Hardening

Microsoft's Active Directory AD is a directory service that enables the IT admin to manage security permissions and control access within a Windows domain network. As a core management system in many of organisation, AD has become a primary target for adversaries. While many solutions for hardeni...

GARAGE: Characterizing the Automation Boundary in LLM-Based Attack Graph Generation

While modern vehicle security depends on effective Cyber Threat Intelligence CTI synthesis, current automated tools struggle with unstructured data and automotive-specific architectural nuances. To bridge this gap, we introduce GARAGE, a RAG-powered framework that converts fragmented CTI into an...

AINEE

Autonomous Internal Network Exploitation Engine The Autonomou...

pentestai

PentestAI Autonomous penetration testing framework for intent...

Game-Theoretic Modeling of Stealthy Intrusion Defense against MDP-Based Attackers

The rapid expansion of Internet use has increased system exposure to cyber threats, with advanced persistent threats APTs being especially challenging due to their stealth, prolonged duration, and multi-stage attacks targeting high-value assets. In this study, we model APT evolution as a strategi...

Dynamic Causal Attack Graph Based Cyber-Security Risk Assessment Framework for CTCS System

Protecting the security of the train control system is a critical issue to ensure the safe and reliable operation of high-speed trains. Scientific modeling and analysis for the security risk is a promising way to guarantee system security. However, the representation and assessment of the...

Perry: a High-Level Framework for Accelerating Cyber Deception Experimentation

Cyber deception aims to distract, delay, and detect network attackers with fake assets such as honeypots, decoy credentials, or decoy files. However, today, it is difficult for operators to experiment, explore, and evaluate deception approaches. Existing tools and platforms have non-portable and...

MM-AttacKG: a Multimodal Approach to Attack Graph Construction with Large Language Models

Cyber Threat Intelligence CTI parsing aims to extract key threat information from massive data, transform it into actionable intelligence, enhance threat detection and defense efficiency, including attack graph construction, intelligence fusion and indicator extraction. Among these research topic...

Adaptive Wizard for Removing Cross-Tier Misconfigurations in Active Directory

Security vulnerabilities in Windows Active Directory AD systems are typically modeled using an attack graph and hardening AD systems involves an iterative workflow: security teams propose an edge to remove, and IT operations teams manually review these fixes before implementing the removal. As...

Modernizing Vulnerability Management: The Move Toward Exposure Management

Managing vulnerabilities in the constantly evolving technological landscape is a difficult task. Although vulnerabilities emerge regularly, not all vulnerabilities present the same level of risk. Traditional metrics such as CVSS score or the number of vulnerabilities are insufficient for effectiv...