Map Active Directory attack paths and identify privilege escalation opportunities.
npx skills add https://github.com/AeonDave/malskill --skill bloodhound
Please help me install this Agent Skill. Skill: bloodhound Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/windows/bloodhound Command: npx skills add https://github.com/AeonDave/malskill --skill bloodhound
This Skill helps identify and visualize complex attack paths within Active Directory environments, revealing privilege escalation routes and misconfigurations.
Run the SharpHound collector on a domain-joined Windows host to gather data for analysis.
High-intent search queries and answers about installing and using this skill.
Active Directory attack path mapping uses graph theory to visualize relationships and identify the shortest paths to high-privilege accounts like Domain Admins. It reveals misconfigurations and privilege escalation opportunities by analyzing collected AD data.
BloodHound is used in penetration testing to identify complex attack paths within Active Directory environments. It enumerates Kerberoastable accounts, AS-REP roastable users, and ACL abuses to reveal efficient routes for gaining Domain Admin privileges.
Yes, you need to run the SharpHound collector on a domain-joined Windows host to gather the required data. This collected information is then used by BloodHound for visualization and querying during Active Directory environment analysis.
Yes, by applying graph theory to Active Directory data, you can identify Kerberoastable accounts, AS-REP roastable users, and ACL abuses. This approach maps relationships to quickly find privilege escalation opportunities.
The best way to visualize Active Directory misconfigurations is by using graph theory to map attack paths. This method identifies complex privilege escalation routes and vulnerabilities by mapping relationships within the collected AD data.
dreadnodeAutomate SharpHound and AzureHound data ingestion into BloodHound Enterprise deployments.
dreadnodeAnalyze Active Directory attack paths via BloodHound and Neo4j queries.
jassicsAutomate authorized network penetration testing from host discovery to post-exploitation.
blacklanternsecurityEnumerate Active Directory domains and map attack surfaces for penetration testing.
