Collector#

bloodhound-python#

Install

sudo apt update && sudo apt install bloodhound-python -y

Run

bloodhound-python -c ALL -ns 172.16.8.3 -u "$user" -p "$pass" -d inlanefreight.local --zip

If ldaps, use --use-ldaps

bloodhound-python -c ALL -ns 172.16.8.3 -u "$user" -p "$pass" -d inlanefreight.local --use-ldaps --zip

If can’t use udp, or behind a pivot box, is using proxychains, use --dns-tcp

bloodhound-python -c ALL -ns 172.16.8.3 -u "$user" -p "$pass" -d inlanefreight.local --dns-tcp --zip

rusthound-ce#

install

git clone https://github.com/g0h4n/RustHound-CE.git
cd RustHound-CE
sudo apt update && sudo apt install cargo rustup -y
rustup default stable
make release

Run

./rusthound-ce -c All -i 172.16.8.3 -d inlalocalnefreight.local -u "$user" -p "$pass" -z

ldaps

./rusthound-ce -c All -i 172.16.8.3 -d inlanefreight.local -u "$user" -p "$pass" --ldaps -z

Server#

Download the docker compose file

wget https://github.com/SpecterOps/BloodHound/raw/refs/heads/main/examples/docker-compose/docker-compose.yml

Edit the file as you like, you can also set admin user/pass with bhe_default_admin_principal_name= and bhe_default_admin_password=

docker-compose up -d
Backward Adcs Attacks Dacl Abuse Forward