> For the complete documentation index, see [llms.txt](https://copilot-docs.bugbase.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://copilot-docs.bugbase.ai/enterprise/exploit-graph.md).

# Exploit Graph

The Exploit Graph shows entities and relationships discovered during scans. Use it to understand how a finding was reached and what other assets are connected to it.

<figure><img src="/files/Los65uMOT5s2SfNIY9aH" alt=""><figcaption></figcaption></figure>

## What the Graph Contains

* **Root entities** such as domains, subnets, IP addresses, and APK files.
* **Discovered assets** such as web pages, APIs, hosts, services, users, groups, certificates, and cloud resources.
* **Operational entities** such as browser sessions, goals, trajectories, test cases, and test case sets.
* **Vulnerabilities** with severity, CVSS/CWE/CVE metadata, evidence, remediation, and validation state.
* **Relations** showing discovery, execution, containment, use, compromise, or exploit-path links.

## Common Uses

* Find all assets under a root domain or subnet.
* Trace a vulnerability back to the page, API, session, host, or credential that produced it.
* Inspect related nodes before marking a finding false positive or duplicate.
* Confirm whether a path crossed an expected boundary.
* Open a node’s properties for raw evidence and metadata.

## Actions

* **Search** for entities by name, URL, IP, label, or identifier.
* **Click a node** to view properties and connected relationships.
* **Expand a node** to load neighbors.
* **Open attack path drawers** from finding pages for a focused read-only path.
* **Use retest mode** from finding pages when fresh validation is needed.

{% content-ref url="/pages/Qq4eYhCnXnWRSOdpI5cq" %}
[Attack Paths](/enterprise/modules/attack-paths.md)
{% endcontent-ref %}