Home

AttackMap Wiki

AttackMap is an open source security analysis tool built to explain a codebase from an attacker's perspective.

The goal is not generic static analysis. The goal is to help answer:

• What is exposed?
• What can talk to what?
• Where are the trust boundaries?
• How could an attacker move through this system?
• What should be fixed first?

Project Areas

• MVP Roadmap
• Architecture
• Threat Modeling Approach
• Examples
• Contributing
• Generated Engineering Docs
• Maintainer Architecture Overview
• Maintainer Data Flow
• Maintainer Module Map
• Maintainer File Guide
• Analyzer Ecosystem
• Analyzer Contract
• Hint Taxonomy
• Test Strategy
• Behavior Guarantees
• Test Gaps
• Threat-Ops Positioning
• Defender Workflow
• Next Security Evolution
• Maintainer Extension Points
• Maintainer Known Design Debt

Current Focus

The current MVP work is organized around five issues:

1. Framework-aware route detection
2. Datastore and authentication signal detection
3. Realistic example applications
4. Findings prioritization
5. Richer connected attack paths

Working Principles

• Prefer small, reviewable changes.
• Keep security language concrete.
• Favor attacker-path reasoning over generic code explanation.
• Validate behavior with tests and example apps.

Quick Start

attackmap .
attackmap examples/webhook-billing-demo
attackmap examples/flask-admin-demo

---

Migrated from https://gitlab.com/matthewd.xyzAI/AttackMap/-/wikis/Home.