BloodHound.py

This tool install is based on the existence of virtualenv.

apt update
apt install python3-virtualenv

Note on virtualenv usage:

• these containers are used to allow conflicting dependency installs to live side by side harmoniously
• activate / deactivate dependency containers for proper usage
  • prompt# source demo-env/bin/activate
  • prompt(demo-env)# deactivate
• with screen/tmux, multiple dependency containers can be activated at the same time

BloodHound.py

Overview: The Linux version of BloodHound’s collection engine.

Tool located here

Possible Blurb:

Once the tester had gained access to a set of valid domain credentials a BloodHound data collection was performed using the BloodHound.py / SharpHound collector. This toolkit was designed as an enumeration platform for Active Directory, its associated control paths, ACLs, users, groups, domains, sessions, and trusts.

The BloodHound dataset for the customer.com domains was comprised of around <> users and <> computer objects. This provided the testers with a visual representation of the AD environment’s object relationships. It also facilitated effective searches for interesting systems, users, domains, and group memberships.

Installation (virtual environment activation and deactivation too)

cd /opt/
git clone https://github.com/fox-it/BloodHound.py.git
cd BloodHound.py
virtualenv -p python3 bh-env
source bh-env/bin/activate
python3 -m pip install wheel
python3 setup.py install
python3 -m pip install .************
deactivate
cd /opt/

Help

python3 bloodhound.py -h

Usage

python3 bloodhound.py -u 'ella_mejia' -p 'P@55w0rd' -d 'domain.com' -dc 192.168.1.4 -gc 192.168.1.4