BloodHound - Six Degrees of Domain Admin - Hacking Land

BloodHound is a single page Javascript web application, built on top of Linkurious, compiled with Electron, with a Neo4j database fed by a PowerShell ingestor.

BloodHound uses graph theory to reveal the hidden and often unintended relationships within an Active Directory environment. Attacks can use BloodHound to easily identify highly complex attack paths that would otherwise be impossible to quickly identify. Defenders can use BloodHound to identify and eliminate those same attack paths. Both blue and red teams can use BloodHound to easily gain a deeper understanding of privilege relationships in an Active Directory environment.

BloodHound is developed by @_wald0, @CptJesus, and @harmj0y.

Getting started

Getting started with BloodHound is very simple. Once complete, head over to the Data Collection section to start collecting data, or check out the included database using BloodHound.

Windows

Download and install neo4j community edition.
Optional: configure the REST API to accept remote connections if you plan to run neo4j and the PowerShell ingestor on different hosts.

Clone the BloodHound GitHub repo.

git clone https://github.com/adaptivethreat/Bloodhound

Start the neo4j server, pointing neo4j to the provided sample graph database.
Run BloodHound.exe from the release found here or build BloodHound from source.
Authenticate to the provided sample graph database at bolt://localhost:7687. The username is "neo4j", and the password is "BloodHound".

You're now ready to get started with data collection!

Linux

Download and install neo4j community edition.
Optional: configure the REST API to accept remote connections if you plan to run neo4j and the PowerShell ingestor on different hosts.

Clone the BloodHound GitHub repo.

git clone https://github.com/adaptivethreat/Bloodhound

Start the neo4j server, pointing neo4j to the provided sample graph database.
Run BloodHound from the release found here or build BloodHound from source.
```
./BloodHound
```
Authenticate to the provided sample graph database at bolt://localhost:7687. The username is "neo4j", and the password is "BloodHound".

You're now ready to get started with data collection!

OSX

Download and install neo4j community edition.
Optional: configure the REST API to accept remote connections if you plan to run neo4j and the PowerShell ingestor on different hosts.

Clone the BloodHound GitHub repo.

git clone https://github.com/adaptivethreat/Bloodhound

Start the neo4j server, pointing neo4j to the provided sample graph database.
Run the BloodHound App from the release found here or build BloodHound from source.
Authenticate to the provided sample graph database at bolt://localhost:7687. The username is "neo4j", and the password is "BloodHound".