Open‑Source Security Tools & Projects

Our commitment to community

We’re committed to advancing security through meaningful open source contributions that reveal what adversaries actually see and do.

Explore open source tools

Research

Ghostwriter v6 is Live!

Research

Nemesis 2.0

Our principle

SpecterOps was founded on the principle that security strengthens when knowledge flows freely. Starting with BloodHound, we’ve maintained our leadership in open source innovation, believing that transparency and collaboration build a stronger, more secure world for everyone.

Get Started

Explore our open source tools

BloodHound Community Edition

Manage Identity Attack Paths across your hybrid environment and remove the adversary’s favorite target.

Ghostwriter

Ghostwriter is a Django web app for red teams to track projects, clients, assets, reports, and evidence.

Mythic

Mythic is an open-source Command and Control (C2) framework designed around a microservice architecture.

Nemesis 2.0

Nemesis 2.0 functions as an "offensive VirusTotal," automatically processing files collected during security assessments through an extensive pipeline of specialized analyzers.

Check out our full arsenal of tools

Learn from others and share your story on the BloodHoundGang Slack Community

Join the conversation

Get Started with BloodHound Community Edition

See your network the way adversaries do—map attack paths in minutes.

Learn more

White Papers

The Renaissance of NTLM Relay Attacks: Everything You Need to Know

NTLM relay attacks are still viable and more dangerous than ever, despite the common belief that the problem has been solved or minimized.

Start BloodHound Community Edition

Use the tool you keep getting beat by…for free!

Get on GitHub

White Papers

Certified Pre-Owned

Explore how Active Directory Certificate Services (AD CS) poses risks, including credential theft and domain escalation, demanding awareness.

Illustration of a hand holding 4 playing cards

White Papers

An ACE Up the Sleeve

This paper offers technical insights on building backdoors through misconfigured security descriptors, including ACE enumeration, BloodHound mapping, and defensive considerations, with case studies and future research prospects.

Case Studies

Sustaining and Continuous Verification of Tier 0 with BloodHound Enterprise

As Australia’s leading natural gas producer, Woodside places significant importance on the resiliency of its technology platforms and recognises Active Directory as a pervasive part of the IT landscape that ransomware operators have used to execute attacks at other organisations.

White Papers

Certified Pre-Owned

Explore how Active Directory Certificate Services (AD CS) poses risks, including credential theft and domain escalation, demanding awareness.

White Papers

An ACE Up the Sleeve

Case Studies

Sustaining and Continuous Verification of Tier 0 with BloodHound Enterprise

Learn from others and share your story on the BloodHoundGang Slack Community

Start BloodHound Community Edition

Sign Up For Updates From SpecterOps