BloodHound 8.0 update adds BloodHound OpenGraph — expanding attack path visibility beyond AD and Entra ID. Learn More
BloodHound Enterprise
Advance from mapping to eliminating attack paths with the enterprise platform that delivers at scale
BloodHound Community Edition
Start mapping attack paths with the open-source tool that started it all
State of Attack Path Management
SpecterOps's inaugural report, highlighting the biggest growing problem facing the security community: Identity Security.
OFFENSIVE SERVICES
TRAINING & TRADECRAFT
Adversary Tactics
Adversary Perspectives
JOIN US
Specter Bash 2025
Trainings, evening sessions, and more with a Halloween twist to ring in the spooky time of year.
SOLUTIONS
INDUSTRIES
PARTNERS & INTEGRATIONS
RESOURCES
Attack Path Management Maturity Model
Evaluate your ability to stop identity-based attacks
Our Commitment to Open Source
Committed to advancing the community through open source contributions, cutting-edge research, and knowledge sharing
OPEN SOURCE TOOLS
Join the Conversation
Learn from others and share your story on the BloodHoundGang Slack Community
OPEN SOURCE RESEARCH
Collaborative Editing
Ghostwriter now supports real-time collaborative editing for observation...
ABOUT US
GET IN TOUCH
PRESS RELEASE
SpecterOps Expands the Power of Attack Path Management to Reduce Identity Risk Across the Enterprise with BloodHound OpenGraph and v8.0
FEATURED EVENT
Gartner Security & Risk Management Summit
September 22 - 24, 2025 | London UK
RESEARCH
BLOG
EVENTS
Fueling the Fight Against Identity Attacks
When we founded SpecterOps, one of our core principles was to build a...
The Renaissance of NTLM Relay Attacks
NTLM relay attacks have been around for a long time. While many security...
The Renaissance of NTLM Relay Attacks: Everything You Need to Know
Estimated read time: 5 min
You might also be interested in
The State of Attack Path Management
Our inaugural report highlights why Identity Security is increasingly complex, and why it's difficult to execute without Attack Path Management. We're shifting the conversation from static checklists to the dynamic attack graph.
Read more
Certified Pre-Owned
Explore how Active Directory Certificate Services (AD CS) poses risks, including credential theft and domain escalation, demanding awareness.
An ACE Up the Sleeve
This paper offers technical insights on building backdoors through misconfigured security descriptors, including ACE enumeration, BloodHound mapping, and defensive considerations, with case studies and future research prospects.
