Skip to content

Latest commit

 

History

History
61 lines (38 loc) · 2.71 KB

README.md

File metadata and controls

61 lines (38 loc) · 2.71 KB

havoc-bloodhound

A GUI wrapper inside of Havoc to interact with bloodhound CE

image

Install

I recommend installing this module through the havoc store only since the module is dependant on beeing located inside of the data/extentions folder inside of havoc: image

Setup

You will need an instance of BloodHound Community Edition more on that here. You will then need to download your collector from the web interface inside of the Gear > Download Collectors:

image

From there inside of the module you can specify it inside of Bloodhound > SharpHound:

image

Make sure you save your changes for persistance. You will then need to generate API keys inside of bloodhound CE and supply them to the script through BloodHound > Settings:

image image

Like before make sure you save everything for persistance.

Usage

From here you can then use the bloodhound command inside of havoc to run your collector and upload the zip file after your downloaded it. Note that the arguments of the collector are defined inside of the SharpHound menu.

02/01/2024 22:26:13 [leo] Demon » help bloodhound

 - Command       :  bloodhound
 - Description   :  A command to manage bloodhound related things

  Command                   Description      
  ---------                 -------------     
  collect                   Run the Bloodhound collector on the target machine (aka: SharpHound)
  upload                    Upload the zip file to the api

02/01/2024 22:26:17 [leo] Demon » help bloodhound upload

 - Command       :  bloodhound upload
 - Description   :  Upload the zip file to the api
 - Example       :  bloodhound upload /data/ c:\file\number_BloodHound.zip
 - Required Args :  2

image

Todo:

  • Add a unconstrained delegation command search (if user is NTAuthority search from machine else search from exploited user
  • Path finding, same functionality as search but takes current user / computer and target searched item