x

Bloodhound

24.11.1 - Prerequisites

sudo neo4j console
sudo bloodhound

24.11.2 - SharpHound

SharpHound.exe -c all --domain oscp.lab --zipfilename sh.zip 

24.11.3 - PlumHound

Probably won't end up using this, regardless.

sudo python3 PlumHound.py --easy -p [USER-PW]
sudo python3 PlumHound.py -x tasks/default.tasks -p [USER-PW]

24.11.4 - BloodHound-Python

This can be useful if you have legit credentials but you don't have access via WinRM, RDP, etc.

bloodhound-python -u 'p.agila' -p 'prometheusx-303' -d fluffy.htb -ns 10.10.11.69 -c All --zip

Shouldn't need it as I'll be using bloodhound. But this is the collector for bloodhound-ce

bloodhound-ce-python -d fluffy.htb -u p.agila -p prometheus -dc dc01.fluffy.htb -c all -ns IP --zip
Left-click: follow link, Right-click: select node, Scroll: zoom
x