Attack Chain Planner (research/chain.py)

Decepticon-Cobaltai · analytics, attack, graph, neo4j, chain, security

Computes weighted shortest exploitation paths in a Neo4j attack graph, integrating edge difficulty, severity, and PoC validation to plan multi-step attack chains.

# Source: https://github.com/mperkins0155/Decepticon-Cobaltai | License: Apache-2.0 | Copyright You must retain, in the Source form of any Derivative Works
# Provided via justclaw.it.com; keep this notice with the code.
"""Attack-chain planner — Neo4j Cypher-native path search.

Given a Neo4j attack graph, compute multi-hop exploitation paths from
``Entrypoint`` nodes to ``CrownJewel`` nodes using APOC's weighted
shortest-path algorithms. The cost model combines:

- edge weight (analyst-assigned difficulty, lower = easier)
- vulnerability severity (critical shrinks cost, info grows it)
- node-level validation state (validated PoCs halve the cost)

All path computation runs inside Neo4j via Cypher — no Python-side
graph traversal. Results are returned as plain data structures that
callers c

... (truncated -- full source via MCP)

See the full source, get the GitHub permalink, and search 40K more like it.

Get a free API key