Attack Tree App.

AI-powered attack tree generator for threat modeling

GitHub
Attack Tree App architecture

Overview

AI-powered attack tree generator for threat modeling. Enter any attacker goal and receive a comprehensive attack tree with relevant vectors, defenses, and risk analysis.

Default Prompts (No API Key Needed)

PromptDescription
Steal user credentialsAuthentication attacks
Access admin dashboardAuthorization bypass
Steal payment card dataFinancial fraud
Take down websiteDoS attacks
Hack into ATMATM security
Compromise hospital systemsHealthcare attacks

Each attack vector includes mitigation strategies and OWASP Top 10 mapping where applicable.

How It Works

1

Enter Goal

Enter any attacker goal like 'Steal user credentials' or 'Take down website'. 6 pre-built attack trees work instantly without any API key.

2

AI Generation

Groq API with Llama 3.1 70B generates a comprehensive attack tree with vectors, defenses, and OWASP mapping.

3

Export

Download trees as Markdown or JSON for integration into security documentation.

Tech Stack

PythonFastAPIGroq APILlama 3.1 70B