Kevin Mandia, Founder of Mandiant, to Deliver Featured Keynote at SO-CON 2026. Learn More
Back to Resource Center
Open-source Tools

Merlin

Merlin is a cross-platform post-exploitation Command & Control server and agent written in Go.

Download on GitHub
Merlin

Explore other tools

BloodHound Community Edition

Manage Identity Attack Paths across your hybrid environment and remove the adversary’s favorite target.

BloodHound Community Edition

Read more

Nemesis 2.0

Nemesis 2.0 functions as an "offensive VirusTotal," automatically processing files collected during security assessments through an extensive pipeline of specialized analyzers.

Nemesis 2.0

Read more

Ghostwriter

Ghostwriter is a Django web app for red teams to track projects, clients, assets, reports, and evidence.

Ghostwriter

Read more

Mythic

Mythic is an open-source Command and Control (C2) framework designed around a microservice architecture.

Mythic

Read more

Join the Conversation

Learn from others and share your story on the BloodHoundGang Slack Community

More info

You might also be interested in

Datasheets

Introducing BloodHound Enterprise On-Premises

Identity compromises are an existential threat to all organizations, regardless of industry or vertical with over 97% of breaches leveraging an identity attack path.

Read more

Case Studies

Regional Hospital System Fills Gap in Identity Risk Reduction

A U.S. Healthcare Organization Eliminated Hidden Privilege Escalation Chains with BloodHound Enterprise

Read more

Cover of the State of APM report
White Papers

The State of Attack Path Management

Our inaugural report highlights why Identity Security is increasingly complex, and why it's difficult to execute without Attack Path Management. We're shifting the conversation from static checklists to the dynamic attack graph.

Read more