BoxPwnr-Traces

BoxPwnr-Traces BoxPwnr のトレースとベンチマーク結果。複数のセキュリティプラットフォームを対象としています。 各トレースには、LLM との完全なやり取り、実行されたコマンド、マークダウンレポート + 攻撃グラフ、統計情報、使用された設定が含まれます。リーダーボードを閲覧したり、インタラクティブな Web ビューアで実行を再生したり、AI 生成のレポートを読むことができます。 🔬 BoxPwnr トレース& ベンチマーク プラットフォーム| 解決済み| 完了率| トレース数 ---|---|---|--- HTB Starting Point| 25/25| | 77...

Adalanche

Adalanche 오픈 소스 공격 그래프 시각화 및 탐색기 Adalanche는 Active Directory에서 사용자와 그룹이 가진 권한을 즉시 보여줍니다. 계정, 머신 또는 전체 도메인을 장악할 수 있는 사람을 시각화하고 탐색하는 데 유용하며, 잘못된 구성을 찾아 표시하는 데 사용할 수 있습니다. 도메인 관리자가 될 수 있나요? Active Directory 보안은 악명 높게 어렵습니다. 소규모 조직은 일반적으로 자신이 무엇을 하고 있는지 전혀 모르며, 너무 많은 사람들이 도메인 관리자에 추가되어 있습니다. 대규모 조직에는...

Stormspotter

Stormspotterは、Azureサブスクリプション内のリソースの「攻撃グラフ」を作成します。これにより、レッドチームやペネトレーションテスターはテナント内の攻撃対象領域とピボットの機会を可視化でき、防御側の担当者はインシデント対応作業を迅速に方向付け、優先順位付けできるようになります。 インストール Dockerを使う場合 ほとんどのユーザーはDocker経由でStormspotterをインストールする方が簡単だと感じるでしょう。これが推奨される方法です。 git clone https://github.com/Azure/Stormspotter docker-compose ...

RAGE

RAGE - Relational Attack Graph Exchange 実際に他人に渡すことができる攻撃グラフ。 グラフベースのセキュリティ製品はすべて、攻撃グラフを独自のストアに閉じ込めてしまいます。エクスポートもできず、2つのスキャンをdiffすることも、バージョン管理に置くことも、ベンダー自身のUI以外でクエリすることもできません。エンゲージメントが終われば、グラフも一緒に去ってしまいます。 RAGEは、オフェンシブセキュリティグラフのためのベンダー中立なファイルフォーマット...

pentestai

PentestAI Autonomous penetration testing framework for intent...

Game-Theoretic Modeling of Stealthy Intrusion Defense against MDP-Based Attackers

The rapid expansion of Internet use has increased system exposure to cyber threats, with advanced persistent threats APTs being especially challenging due to their stealth, prolonged duration, and multi-stage attacks targeting high-value assets. In this study, we model APT evolution as a strategi...

Dynamic Causal Attack Graph Based Cyber-Security Risk Assessment Framework for CTCS System

Protecting the security of the train control system is a critical issue to ensure the safe and reliable operation of high-speed trains. Scientific modeling and analysis for the security risk is a promising way to guarantee system security. However, the representation and assessment of the...

Perry: a High-Level Framework for Accelerating Cyber Deception Experimentation

Cyber deception aims to distract, delay, and detect network attackers with fake assets such as honeypots, decoy credentials, or decoy files. However, today, it is difficult for operators to experiment, explore, and evaluate deception approaches. Existing tools and platforms have non-portable and...

MM-AttacKG: a Multimodal Approach to Attack Graph Construction with Large Language Models

Cyber Threat Intelligence CTI parsing aims to extract key threat information from massive data, transform it into actionable intelligence, enhance threat detection and defense efficiency, including attack graph construction, intelligence fusion and indicator extraction. Among these research topic...

Adaptive Wizard for Removing Cross-Tier Misconfigurations in Active Directory

Security vulnerabilities in Windows Active Directory AD systems are typically modeled using an attack graph and hardening AD systems involves an iterative workflow: security teams propose an edge to remove, and IT operations teams manually review these fixes before implementing the removal. As...

Modernizing Vulnerability Management: The Move Toward Exposure Management

Managing vulnerabilities in the constantly evolving technological landscape is a difficult task. Although vulnerabilities emerge regularly, not all vulnerabilities present the same level of risk. Traditional metrics such as CVSS score or the number of vulnerabilities are insufficient for effectiv...