BloodHound

Installation

GitHub: https://github.com/SpecterOps/BloodHound

sudo pip3 install bloodhound

Once bloodhound has installed, run the neo4j console, this is is required to be able to run bloodhound. Access the neo4j remote interface at http://localhost:7474. For first time users, you may be asked to log in, use the default credentials neo4j:neo4j. Once logged in, you will then be asked to change your password.

Run bloodhounnd and login using your new neo4j credentials. You can then run bloodhound ingester and upload data to bloodhound for analysis.

Neo4j

sudo neo4j console

Neo4j

BloodHound

sudo bloodhound

BloodHound Login Page

BloodHound Ingester

General Usage: sudo bloodhound-python -d [domain] -u [user] -p [password] -ns [nameserver/DC IP] all

sudo bloodhound-python -d contoso.local -u Administrator -p Password1 -ns 10.1.1.100 -c allo

BloodHound Ingester

Upload Data to BloodHound

1. In BloodHound, click Upload Data on the right-hand side.

2. Navigate to the directory where the ingested files are stored. Select all files and click Open.

3. Wait for the Upload Progress to finish and click Clear Finished.

4. Click the Hamburger icon to show the data menu.