BloodHound 8.0 update adds BloodHound OpenGraph — expanding attack path visibility beyond AD and Entra ID. Learn More
Open Source Tools

Mythic

Mythic is an open-source Command and Control (C2) framework designed around a microservice architecture. It uses Docker Compose with a Golang server, RabbitMQ message broker, PostgreSQL database, and a React web interface to bring extensibility and quality of life features to operators. Mythic’s interface brings multi-user support, customized user preferences, RBAC controls, OPSEC checks, dynamic tab completion, and a powerful scripting capability that enables dynamic tables, file previews, and more in line with your task output. Mythic puts power in the hands of the operator with Python scripting libraries, Jupyter Notebooks, an interactive GraphQL explorer (via Hasura), and a custom eventing engine. Mythic doesn’t include any agents or communication profiles; they’re all dynamically installed based on your needs. Mythic supports agents across macOS, Linux, and Windows, along with more unique requirements like Webshells, Chrome extensions, and even agents to interact with 3rd party services like BloodHound, Ghostwriter, Nemesis, and VECTR.

Download on GitHub
Mythic

Explore other tools

BloodHound Community Edition

Manage Identity Attack Paths across your hybrid environment and remove the adversary’s favorite target.

BloodHound Community Edition

Read more

Ghostwriter

Ghostwriter is a Django web app for red teams to track projects, clients, assets, reports, and evidence.

Ghostwriter

Read more

Nemesis 2.0

Nemesis 2.0 functions as an "offensive VirusTotal," automatically processing files collected during security assessments through an extensive pipeline of specialized analyzers.

Nemesis 2.0

Read more

Join the conversation

Learn from others and share your story on the BloodHoundGang Slack Community

Connect with us

You might also be interested in

Affiliated Toolsets

Nemesis

Read more

Cover of the State of APM report
White Papers

The State of Attack Path Management

Our inaugural report highlights why Identity Security is increasingly complex, and why it's difficult to execute without Attack Path Management. We're shifting the conversation from static checklists to the dynamic attack graph.

Read more

Datasheets

Go Beyond Traditional Boundaries with Privilege Zones in BloodHound

Identity security practices have long supported a model of separating assets into secure management categories as part of a privileged access strategy, whether those be legacy directory services systems or modern hybrid or cloud environments. The most critical assets are often classified as Tier Zero (or the Control Plane).

Read more