Ghostwriter

What Ghostwriter is

Ghostwriter is a platform for red teams and security consultants to plan, manage, and document assessments. It brings together client, project, asset, finding, and evidence management in a collaborative environment. Teams can create Word reports using Jinja2 templates, as well as XLSX, PPTX, and JSON reports. Those reports can draw on historical information about clients, projects, infrastructure, and findings; more built-in statistics are planned.

Ghostwriter provides role-based access controls, single sign-on, and multi-factor authentication. Its GraphQL API supports custom project management and reporting workflows, including connections to external tools. It can automatically record activity from Mythic C2 and Cobalt Strike, and its documentation explains how to use BloodHound data in reports. The software is a Django web app, available for web, API, and self-hosted use. It is licensed under BSD-3 and the Ghostwriter plan costs nothing. Installation and setup instructions are in the project documentation. For help, the README points users to the BloodHound Slack Team’s #ghostwriter channel and GitHub issues.

Who it suits

Ghostwriter suits red teams and consultants who need a shared place to plan, carry out, and document assessments. It is particularly relevant to teams that need flexible report outputs, assessment data management, and connections to security tools.

Getting started

1. Open the project website on GitHub.
2. Review the installation and setup instructions in the project documentation.
3. Install and configure the Django web app for web, API, or self-hosted use.
4. Use the README’s support links for help through the BloodHound Slack Team’s #ghostwriter channel or GitHub issues.

Verdict

Choose Ghostwriter if your red team or consultancy needs assessment management, evidence capture, and configurable reporting in one collaborative platform. Look elsewhere if you need built-in reporting statistics beyond its current historical-data reporting capabilities.