BLOODHOUND

PRIMARY CATEGORY → WINDOWS CREDENTIALED ENUMERATION   •   DACL ABUSE

Theory

---

Collection - UNIX-Like

Rusthound-CE

Rusthound-CE

Setup

Check Releases

curl --silent --location --request GET 'https://github.com/g0h4n/RustHound-CE/releases/download/v<X.X.X>/rusthound-ce-Linux-gnu-x86_64.tar.gz' --output rusthound.tar.gz

tar -xvzf !$ rusthound-ce

chmod 700 !$

Usage

./rusthound-ce --domain '<DOMAIN>' --ldapusername '<USER>' --ldappassword '<PASSWD>' --ldapip '<DC>' --collectionmethod All --zip

Bloodhound.py

Bloodhound.py

Check this out

---

Collection - Windows

SharpHound

---

BH CE - Docker Containers Cleanup

Containers

docker rm --force $( docker ps --all --quiet )

Images

docker rmi --force $( docker image --all --quiet )

Volumes

docker volume rm --force $( docker volume ls --quiet )

Remains and cache

docker system prune --all --force --volumes
docker builder prune --all --force