BloodHound - Six Degrees of Domain Admin

BloodHound is a single page Javascript web application, built on top of Linkurious, compiled with Electron, with a Neo4j database fed by a PowerShell ingestor.

BloodHound uses graph theory to reveal the hidden and often unintended relationships within an Active Directory environment. Attacks can use BloodHound to easily identify highly complex attack paths that would otherwise be impossible to quickly identify. Defenders can use BloodHound to identify and eliminate those same attack paths. Both blue and red teams can use BloodHound to easily gain a deeper understanding of privilege relationships in an Active Directory environment.

Windows

1. Download and install neo4j community edition.
   Optional: configure the REST API to accept remote connections if you plan to run neo4j and the PowerShell ingestor on different hosts.
2. Clone the BloodHound GitHub repo.
   git clone https://github.com/adaptivethreat/Bloodhound
3. Start the neo4j server, pointing neo4j to the provided sample graph database.
4. Run BloodHound.exe from the release found here or build BloodHound from source.
5. Authenticate to the provided sample graph database at bolt://localhost:7687. The username is "neo4j", and the password is "BloodHound".

You're now ready to get started with data collection!

---

Linux

1. Download and install neo4j community edition.
   Optional: configure the REST API to accept remote connections if you plan to run neo4j and the PowerShell ingestor on different hosts.
2. Clone the BloodHound GitHub repo.
   git clone https://github.com/adaptivethreat/Bloodhound
3. Start the neo4j server, pointing neo4j to the provided sample graph database.
4. Run BloodHound from the release found here or build BloodHound from source.
   ./BloodHound
5. Authenticate to the provided sample graph database at bolt://localhost:7687. The username is "neo4j", and the password is "BloodHound".

You're now ready to get started with data collection!

---

OSX

1. Download and install neo4j community edition.
   Optional: configure the REST API to accept remote connections if you plan to run neo4j and the PowerShell ingestor on different hosts.
2. Clone the BloodHound GitHub repo.
   git clone https://github.com/adaptivethreat/Bloodhound
3. Start the neo4j server, pointing neo4j to the provided sample graph database.
4. Run the BloodHound App from the release found here or build BloodHound from source.
5. Authenticate to the provided sample graph database at bolt://localhost:7687. The username is "neo4j", and the password is "BloodHound".

Github Project