AttackGen

AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK and ATLAS frameworks. The tool generates tailored incident response scenarios based on user-selected threat actor groups, AI attack case studies, and your organisation's details.

Star the Repo
Features
Releases
Requirements
Installation
Data Setup
Running AttackGen
Usage
Security Best Practices
Contributing
Licence

Star the Repo

If you find AttackGen useful, please consider starring the repository on GitHub. This helps more people discover the tool. Your support is greatly appreciated! ⭐

Features

Generates unique incident response scenarios based on chosen threat actor groups or ATLAS case studies.
Allows you to specify your organisation's size and industry for a tailored scenario.
Supports MITRE ATT&CK Enterprise, ICS (Industrial Control Systems), and ATLAS (Adversarial Threat Landscape for AI Systems) frameworks.
Displays a detailed list of techniques used by the selected threat actor group or case study.
Create custom scenarios based on a selection of ATT&CK or ATLAS techniques.
Use scenario templates to quickly generate custom scenarios based on common types of cyber incidents, including AI/ML-specific attack patterns.
AttackGen Assistant - a chat interface for updating and/or asking questions about generated scenarios.
Capture user feedback on the quality of the generated scenarios.
Downloadable scenarios in Markdown format.
Use the OpenAI API, Anthropic API (Claude models), Azure OpenAI Service, Google AI API, Mistral API, Groq API, locally hosted Ollama models, or custom OpenAI-compatible API endpoints to generate incident response scenarios.
Available as a Docker container image for easy deployment.
Optional integration with LangSmith for powerful debugging, testing, and monitoring of model performance.
Secure credential management using .env file for API keys and secrets.

AttackGen Screenshot

Releases

v0.11

| What's new? | Why is it useful? | | ----------- | ----------------- | | MITRE ATLAS Framework Support | - AI/ML Threat Coverage: AttackGen now supports the MITRE ATLAS (Adversarial Threat Landscape for AI Systems) framework, enabling generation of incident response scenarios for threats targeting AI and machine learning systems. - Case Study-Based Scenarios: Generate scenarios based on 45 documented real-world AI attack case studies, including 14 actual incidents and 31 research exercises covering attacks like prompt injection, model extraction, and data poisoning. - 147 ATLAS Techniques: Access the full ATLAS technique library covering 16 AI-specific tactics including AI Model Access, AI Attack Staging, and traditional attack phases adapted for AI systems. - AI-Specific Templates: Six new custom scenario templates for common AI/ML attacks: Model Evasion, Data Poisoning, Model Extraction, Prompt Injection, LLM Jailbreak, and AI Supply Chain attacks. | | Updated MITRE ATT&CK Data to v18.1 | - Latest Threat Intelligence: AttackGen now uses MITRE ATT&CK v18.1 data, ensuring generated scenarios reflect the most current tactics, techniques, and procedures used by threat actors. - Expanded Enterprise Coverage: The Enterprise threat groups list has grown from 150+ to 187 groups, including newly tracked actors. - Expanded ICS Coverage: The ICS threat groups list has grown from 7 to 16 groups, providing better coverage for industrial control systems scenarios. | | Updated LLM Model Support | - OpenAI: Added GPT-5.2 and GPT-5.2 Pro models; streamlined model list by removing deprecated o-series reasoning models. - Anthropic: Updated to Claude 4.5 family with Sonnet 4.5, Haiku 4.5, and Opus 4.5. - Google AI: Added Gemini 3 Pro and Flash preview models; updated Gemini 2.5 options. - Groq: Added GPT-OSS 120B and 20B models for high-performance inference. - Mistral: Updated to dated model versions (Large 2512, Medium 2508, Small 2506); added Ministral 14B. | | Bug Fixes | - Fixed Google AI Response Handling: Updated response parsing to handle structured content format returned by newer Gemini models, ensuring scenario text is properly extracted and displayed. - Fixed ICS Matrix Error Messages: Error messages now correctly display "ICS ATT&CK" instead of "Enterprise ATT&CK" when using the ICS matrix. - Improved Empty Technique Handling: Added graceful handling when a threat group has no associated techniques, preventing secondary errors. |

v0.10.1

| What's new? | Why is it useful? | | ----------- | ----------------- | | LangChain v1.0 Compatibility | - Fixed Breaking Import Changes: Updated all imports from deprecated langchain.prompts.chat to langchain_core.prompts, ensuring compatibility with LangChain v1.0 and preventing ModuleNotFoundError issues. This maintains stability as the LangChain ecosystem evolves. | | Comprehensive Security Infrastructure | - Automated Security Scanning: Introduced GitHub Actions workflows for continuous security monitoring using Bandit (Python code analysis), CodeQL (vulnerability detection), pip-audit (dependency scanning), Safety (known vulnerabilities), Gitleaks (secrets detection), and Trivy (Docker image scanning). - Security Best Practices Documentation: Added comprehensive SECURITY.md covering supported versions, vulnerability reporting, API key management, data privacy considerations, and deployment security guidance. - Enhanced README Security Section: Expanded security guidance with clear do's and don'ts for API key protection, data privacy considerations, and responsible deployment practices. | | Docker Improvements | - Enhanced Security: Updated Dockerfile to run as non-root user, improving container security posture. - Docker Compose Support: Added docker-compose.yml for streamlined multi-service deployment and easier local development setup. - Better Build Optimization: Enhanced .dockerignore to reduce image size and prevent sensitive files from being included in container images. - Comprehensive Configuration Template: Updated .env.example with all supported API keys (OpenAI, Anthropic, Azure, Google, Mistral, Groq) for easier initial setup. | | Bug Fixes | - Ollama API Timeout: Added timeout configuration to Ollama API requests to prevent hanging connections. - Safety CLI Updates: Updated from deprecated safety check command to new safety scan command, ensuring continued security scanning functionality. - Bandit Configuration: Corrected Bandit security scanning configuration for more accurate Python code analysis. |

v0.10

| What's new? | Why is it useful? | | ----------- | ----------------- | | OpenAI Responses API Integration | - Next-Generation API: AttackGen now uses OpenAI's latest Responses API for all supported models, providing a unified and enhanced interface. | | Latest Frontier Model Support | - GPT-5 Integration: Added support for OpenAI's latest GPT-5 model series including gpt-5, gpt-5-mini, and gpt-5-nano, providing access to the most advanced AI capabilities for scenario generation. - Claude Sonnet 4.5: Added support for Anthropic's latest Claude Sonnet 4.5 (claude-sonnet-4-5-20250929) model, along with updated Claude model versions including Claude Opus 4.1 (claude-opus-4-1-20250805). | | Bug Fixes and Improvements | - Fixed Streamlit Deprecation Warning: Replaced deprecated use_container_width parameter with the new width parameter to ensure compatibility with future Streamlit versions. - Enhanced Documentation: Updated CLAUDE.md with comprehensive guidance for future development work and added detailed architecture information. |

v0.9

| What's new? | Why is it useful? | | ----------- | ----------------- | | Expanded Model Support | - Latest OpenAI Reasoning Models: AttackGen now supports OpenAI's newest reasoning models including o4-mini (the latest reasoning model), o3/o3-mini, and o1-pro (enhanced reasoning capabilities). These models excel at complex scenario generation requiring deep logical thinking. - GPT-4.1 Series: Added support for the GPT-4.1 series models (gpt-4.1, gpt-4.1-mini, and gpt-4.1-nano), offering the latest improvements in general AI capabilities with lighter alternatives for cost-sensitive use cases. - Anthropic Claude Models: Added comprehensive support for Anthropic's Claude models including claude-opus-4-20250514, claude-sonnet-4-20250514, claude-3-7-sonnet-latest, and claude-3-5-haiku-latest. These models offer excellent performance for generating detailed and contextually aware incident response scenarios with strong reasoning capabilities. - Updated Google AI Models: Refreshed the Google AI model selection to include the latest Gemini 2.5 preview models (gemini-2.5-flash-preview-05-20 and gemini-2.5-pro-preview-05-06) alongside Gemini 2.0 models, providing access to the most recent improvements in Google's AI technology. - Improved Model Organization: Reorganized model selection dropdowns to prioritize newer models and updated descriptions to clearly distinguish between different model types and capabilities. | | Enhanced Technique Selection Logic | - More Robust Group Handling: Fixed an issue where empty threat actor groups could cause errors during technique selection. The tool now properly handles empty groups by returning an empty DataFrame, ensuring stable operation even with limited threat actor data. - Phase Name Preservation: Improved the technique selection process to properly include 'Phase Name' in the output, maintaining

Attackgen

Install / Use

README