BloodHound-python is a cross-platform Active Directory ingestor that collects domain, group, computer, session, and policy data for BloodHound graph analysis from a Linux attack box. The article demonstrates Default, LoggedOn, DCOnly, All, pass-the-hash, Kerberos AES key, Kerberos ticket, and zip-based output collection methods in the ignite.local lab against DC1.ignite.local. #BloodHoundpython #ignite.local #DC1.ignite.local
Keypoints
- BloodHound-python collects Active Directory data and outputs JSON for BloodHound.
- Default mode gathers broad domain and host data, including users, groups, and computers.
- LoggedOn mode focuses on active user sessions to help identify lateral movement targets.
- DCOnly collects data from the domain controller only, making it faster and quieter.
- The tool supports password, NT hash, Kerberos AES key, and ticket-based authentication, plus zipped output.
Read More: https://www.hackingarticles.in/active-directory-enumeration-with-bloodhound-python/