devtools

Attackgen

Name: Attackgen
Author: mrwadams

AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK framework. The tool generates tailored incident resp…

1,240 stars169 forksPythonUpdated 9/10/2026100% free · open source

What it does

AttackGen creates realistic cyber‑incident response playbooks for your company by simulating attacks from chosen threat‑actor groups using the MITRE ATT&CK framework.

When to use it

•You want to tabletop‑test your IR team with a scenario that matches a real adversary you fear.
•You need a quick, documented playbook to show investors or auditors that you’ve considered specific threat models.
•You’re building security training material and need a fresh, believable attack narrative each run.

Ready-to-paste prompt

python -m attackgen generate --actor "FIN5" --org "FinTech Solutions Ltd" --output my_fin5_scenario.md

Heads up: AttackGen requires a valid OpenAI API key; the script will exit with a 401 error if the `OPENAI_API_KEY` env variable is missing or invalid.

Saves to your device

Use with Claude

New

Skip the builder — one click puts this in Claude, Cursor, Antigravity and more.

🔑 Needs an API key

Works after you add credentials — the setup agent will ask you for them.

Try it instantly — no install

Claude Code

mkdir -p ~/.claude/skills/f962af88-339a-44a5-861f-628f5959ee5a && curl -fsSL https://workflowstacks.com/api/skills/f962af88-339a-44a5-861f-628f5959ee5a/claude-skill -o ~/.claude/skills/f962af88-339a-44a5-861f-628f5959ee5a/SKILL.md

Open in another AI app

Opens the app with this repo with the prompt ready to go — no copy-paste needed.

Connect the whole catalog (MCP)

claude mcp add --transport http workflowstacks https://workflowstacks.com/api/mcp

Adds a WorkflowStacks connector to Claude Code: search and load any skill here by chatting.

How Attackgen works

Codeflow

Free to inspect

Attackgen is a medium Python project (~7.8k lines across 29 code files, plus 24 test files). Setup is light: runs with Docker — add your API keys to .env. Last commit this month, GPL-3.0 license, has a test suite.

Size

Medium codebase

~7.8k lines · 29 code files · ~1 h to skim

Setup

Light setup

Runs with Docker — add your API keys to .env.

Runs on

Python · Docker

Needs API keys (.env)

Python 97%HTML 3%

Where to start reading

1
README.md
Start here — what it does and how to install it
2
AGENTS.md
The instructions the AI actually follows
3
pyproject.toml
Dependencies and the commands it exposes
4
.env.example
The API keys and settings you must provide
5
core/__init__.py
Inside core/ — the main logic begins here

What's in each folder

core/Core code — the actual logic19 files

skills/Prompts, skills & agent definitions6 files

pages/Frontend / UI4 files

data/Data files7 files

scripts/Helper scripts2 files

tests/Tests — proof it works24 files

.github/CI / automation (GitHub Actions)4 files

.streamlit/Tool / agent settings2 files

READMEHas testsDocumentedCI checksDocker readyGPL-3.0 licenseUpdated this month

Use with Claude

New

Skip the builder — one click puts this in Claude, Cursor, Antigravity and more.

🔑 Needs an API key

Works after you add credentials — the setup agent will ask you for them.

Try it instantly — no install

Claude Code

mkdir -p ~/.claude/skills/f962af88-339a-44a5-861f-628f5959ee5a && curl -fsSL https://workflowstacks.com/api/skills/f962af88-339a-44a5-861f-628f5959ee5a/claude-skill -o ~/.claude/skills/f962af88-339a-44a5-861f-628f5959ee5a/SKILL.md

Open in another AI app

Opens the app with this repo with the prompt ready to go — no copy-paste needed.

Connect the whole catalog (MCP)

claude mcp add --transport http workflowstacks https://workflowstacks.com/api/mcp

Adds a WorkflowStacks connector to Claude Code: search and load any skill here by chatting.

Quick Actions

Details

Creator

mrwadams

Language

Python