BloodHound

CISA red team assessments expose critical infrastructure gaps in threat detection, response and OT security

A Tale of Two SOCs: Insights From Two Red Team Assessments

NoiseHound — Detection-aware BloodHound attack-path scoring - find the quietest route to your objective, calibrated across audit/EDR/SIEM tiers.

MovementHound — PowerShell tool for active minimal-rights lateral movement enumeration, extending BloodHound Legacy

adhammer — Active Directory security-assessment toolkit in Rust — PingCastle-class audit + authorized red-team validation, on a from-scratch DCE/RPC · NTLM · SMB2 · Kerberos stack. One static binary, from Kali or Windows.

ForceHound — Salesforce identity and permission graph collector for BloodHound CE. Maps users, profiles, permission sets, roles, groups, sharing rules, connected apps, and field-level security into attack-path graphs.

AgentHound — Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI services. BloodHound for the agentic stack.

RootHound — Map your path from a low-priv shell to root — like BloodHound, for local Linux privesc.

ghosthound — GhostHound is a BloodHound OpenGraph extension that surfaces Active Directory tombstone reanimation as a first-class attack path, enumerating deleted objects via SHOW_DELETED, mapping who can restore them, and revealing when a reanimated identity regains privileged group membership.

AD-PathFinder — Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.

AIHound — Credential Scanner for Popular Desktop AI Platforms

adscan — Active Directory pentesting tool for Linux. Automated Kerberoasting, AS-REP Roasting, ADCS/ESC exploitation, DCSync, BloodHound integration, and 40+ AD attack paths. ENS Alto / NIS2 / ISO 27001 compliance reports. No Windows required.

SteppingStones — A Red Team Activity Hub

linWinPwn — linWinPwn is a bash script that streamlines the use of a number of Active Directory tools