PlumHound/PlumHound

Health v2 · maintenance only

Adoption not part of the score

1310 stars · 130 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

PlumHound is a Python CLI reporting engine that wraps BloodHoundAD's Neo4j Cypher queries into consumable security reports for Blue and Purple teams. It identifies Active Directory vulnerabilities and attack paths resulting from business operations, policies, and legacy configurations.

Use cases

• generate Active Directory security reports from BloodHound data
• find attack paths to Domain Admin in Active Directory
• run scheduled BloodHound Cypher queries for continuous AD auditing
• harden common Active Directory misconfigurations
• analyze busiest paths to Domain Admin with BlueHound module
• produce HTML reports for blue and purple team exercises
• audit AD privilege escalation paths from Neo4j

When to choose

• you already collect BloodHound data and need repeatable, operations-friendly reports
• your blue or purple team wants continual AD security lifecycle assessment rather than one-off red team use
• you need task-list-driven or single-query Cypher reporting against a Neo4j backend

When to avoid

• you have no BloodHound/Neo4j data collection pipeline in place
• you need a general-purpose vulnerability scanner rather than AD-specific path analysis
• you want a GUI-driven tool instead of a command-line workflow

Facets

cli-tool · maturity active

security search-engine developer-tools security penetration-testing developer-tools python cli cross-platform bloodhound active-directory neo4j cypher blue-team purple-team red-team attack-paths infosec reporting linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="PlumHound/PlumHound")