bloodhound-scripts

KO | EN

gitlite — search

#python #react #machine-learning #rust #nodejs #java #windows #awesome #cli #awesome-list #security #mcp #openai #open-source

bloodhound-scripts

(★ 8)

Bloodhound helper scripts

bloodhound-scripts Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Bloodhound helper scripts and docs

## cypher_basics.md

#### Description

Short primer on Cypher queries and their application to Bloodhound, this should give you enough to start creating queries yourself

## custom_queries.md

#### Description

List custom queries that could be helpful in maximizing BH usage

## add_owned.py

#### Description

A quick script to add lists of compromised users and computers to BloodHound

#### Usage

TODO:
Add your Neo4j username and password to the start of the script

```
usage: add_owned.py [-h] (--comp | --user) filename

positional arguments:
  filename

optional arguments:
  -h, --help  show this help message and exit

Main Arguments:
  --comp      Designation that the owned items are computers
  --user      Designation that the owned items are users
```

Examples
```
python3 add_owned.py --users ./userfile
python3 add_owned.py --comp ./computerfile
```

Example files. Note: the name of the computers/users to add must match usernames and computer names already in BloodHound

Users:
- must have @domain.local appended
```
user01@domain.local      <- will be added
user02@domain.local      <- will be added
user02                   <- will not be added  
```
Computers:
- must have .domain.local appended for Hostnames
- adding a list of both IPs and Hostnames for each computer is most effective, sometimes due to AD config or BH data the computer name is stored as the IP rather than the hostname
```
computer01.domain.local  <- will be added
computer02.domain.local  <- will be added
computer02               <- will not be added

# Assume test.domain.local = 10.10.10.1
# test.domain.local is not a domain computer, and therefore not stored in AD
# A user has a session on 10.10.10.1
# Computer with name 10.10.10.1 (not test) is created within Bloodhound
# You've owned test.domain.local/10.10.10.1 and pretend the user session is a DA
# Without adding the IP as owned BH will not show that path to DA
# Best case is to try and add both

test.domain.local        <- will not be added
10.10.10.1               <- will be added
```

## get_info.py

#### Description

Script to pull various forms of information out of BloodHound including lists of:
- Computers with Service Principal Names configured (only compatible with custom BH version)
- All Domain Users
- All Domain Admins
- All Computers/Users configured with Unconstrained Delegation
- Computers that an input user ```UNAME``` has local administrator privileges over
- Users that are administrators of input computer ```COMP```

#### Usage

TODO:
Add your Neo4j username and password to the start of the script

Helper script to pull lists of information from BloodHound for use

optional arguments:
  -h, --help       show this help message and exit

Main Arguments:
  --spns           Return a list of computers configured with a SPN
                   relationship
  --users          Return a list of all domain users
  --comps          Return a list of all domain computers
  --da             Return a list of all Domain Admins
  --unconstrained  Return a list of all objects configured with Unconstrained
                   Delegation
  --adminto UNAME  Return a list of computers that UNAME is a local
                   administrator to
  --adminsof COMP  Return a list of users that are administrators to COMP
```

Examples
```
python3 get_info.py --spns
python3 get_info.py --users
python3 get_info.py --da
python3 get_info.py --unconstrained
python3 get_info.py --adminto user01@domain.local
python3 get_info.py --adminsof computer01.domain.local
```

bloodhound-scripts

bloodhound-scripts Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

bloodhound-scripts

bloodhound-scripts Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README