In a realistic scenario, you will end up with a normal user and then you will run the bloodhound and then use the data enumerated to get to the Administrator. We will be using the Administrator account to extract maximum data for this enumeration. To get data from the Domain, any user can be used. It is a good time to mention that here the Domain setup is in such a way that we have connected the Domain Controller, Clients, and our Attacker Machine essentially in the same network. We will run the python Bloodhound that we just installed using pip3 and extract the data from the Domain.

As it is made in Python, we can use pip3 to install bloodhound as shown in the image below. Now we are installing a bloodhound that will extract the data from the Domain. We installed BloodHound GUI in previous steps that plot graphs based on the data. This can lead to some confusion but to make it clear once again. To install this data Ingestor which is so unusually named bloodhound. This data can be extracted using a data scrapper which we now need to install. To plot the graphs, it requires data from the Domain. As discussed in the introduction, that Bloodhound represents the data in pretty graphs and searches for possible paths. This is basically where the setting up of the GUI completes. You can save your credentials so that you don’t need to log in each time you want to use bloodhound.Īfter logging in on BloodHound GUI, it opens up a blank white screen with some interaction buttons on the right-hand side and a search box on the left-hand side with some modules attached to it. Use the same set of credentials and you will be able to login into this interface. You can also try to look for bloodhound in your list of installed applications in the menu of Kali Linux and run it directly from there.Īs soon as the BloodHound GUI kicks in, it asks for a set of credentials that we just set up in the neo4j configuration. Running it is a simple task of typing bloodhound on your terminal and hitting Enter key. Now that we have the neo4j service up and running, we can run the Bloodhound GUI. And Move to connect the neo4j Remote Interface. After entering the following information, you will be able to connect to the neo4j database.īefore connecting, it will ask you to change the password as it is your first login. Here, enter a username, we choose the username neo4j and enter a password. It has some prefilled values and some black fields. neo4j consoleĮntering the URL that was highlighted in the image above in a Web Browser, we have the remote interface. It will host the Remote Interface which can be accessed using a Web Browser. To do that we run the neo4j console instance. Now, we need to configure the authentication and other settings on the neo4j service. If that didn’t happen in your case you can always download it by running apt install neo4j. When we ran the apt install bloodhound, it installed neo4j with it. Next, we need to configure the neo4j service that will hold the data which can be represented in graphical form. We start with the Bloodhound GUI which can be installed directly using the apt command. This means that we need to configure them individually.

BloodHound has a GUI and Data scrapper and neo4j Database. Configuring Bloodhound is a 3-step process. We won’t be installing java as we are working on Kali Linux which comes preinstalled with Java. Also, for any reason, if you don’t have Java installed, install java to continue. As always before installing any tool on your Linux Machine, it is recommended to perform an update and upgrade your software packages. We will be following the official documents of BloodHound that can be found on their GitHubbut refining the process. Some multiple guides and methods can help you set up and install bloodhound on your host machine. The Blue Team can use BloodHound to identify and fix those same attack patterns.

BloodHound enables the Attackers to identify complex attack paths that would otherwise be not possible to identify. Table of ContentīloodHound is programmed to generate graphs that reveal the hidden and relationships within an Active Directory Network. It takes the data from any device on the network and then proceeds to plot the graph that can help the attacker to strategize their way to the Domain Admins. In the article, we will focus on the Active Directory Enumeration tool called BloodHound.

Enumerating pre-install packages