{"id":420,"date":"2019-12-31T17:46:16","date_gmt":"2019-12-31T16:46:16","guid":{"rendered":"http:\/\/vroamam.com\/wordpress\/?p=420"},"modified":"2020-01-01T14:29:42","modified_gmt":"2020-01-01T13:29:42","slug":"bloodhound","status":"publish","type":"post","link":"https:\/\/vroamam.com\/wordpress\/blog\/bloodhound\/","title":{"rendered":"BloodHound"},"content":{"rendered":"\n

Part 1 – Installing The Software<\/h2>\n\n\n\n
\"BloodHound<\/figure><\/div>\n\n\n\n

I was asked to investigate the use of BloodHound to see if it might provide some insight into Active Directory and its privileges and trusts at work. I decided to install this onto my home lab first and this post will cover what I did to install the software, which tutorials I followed. Part 2 will discuss how I created my first data upload. <\/p>\n\n\n\n

Like my other posts this is primarily an aide-memoire for me when I come to do it again somewhere else, but I have brought together several bits of information that as a complete novice to Bloodhound I had to search for.<\/p>\n\n\n\n

Initially I installed BloodHound in Kali I had Kali 2019.3 built so I updated it and installed Bloodhound using the aptitude installer. I’d recommend following this article<\/a> by Andy Gill (@zephrfish<\/a>) if you want to build from source.<\/p>\n\n\n\n

Simple install in Kali 2019.3<\/p>\n\n\n\n

\n

$ sudo apt update && sudo apt upgrade<\/p>\n<\/div><\/div>\n\n\n\n

$ sudo apt install bloodhound<\/p>\n\n\n\n

Once this was completed, I attempted to launch neo4j. <\/p>\n\n\n\n

$ neo4j start<\/p>\n\n\n\n

At this point I had some errors pop up that weren’t overly helpful. When I read the messages closely I did eventually get to the point that they are referencing missing directories. So to save you my pain, I had to create these five directories manually. <\/p>\n\n\n\n

  • \/usr\/share\/neo4j\/logs<\/li>
  • \/usr\/share\/neo4j\/plugins<\/li>
  • \/usr\/share\/neo4j\/import<\/li>
  • \/usr\/share\/neo4j\/run<\/li><\/ul>\n\n\n\n

    Since doing this I believe that I should have started neo4j with the following command which would not have required the additional directories<\/p>\n\n\n\n

    $ neo4j console<\/p>\n\n\n\n

    Once you’ve started the console, browse to http:\/\/localhost:7474<\/p>\n\n\n\n

    \"\"
    Neo4j – Login Screen<\/figcaption><\/figure>\n\n\n\n

    On initial login you will be required to change the password:<\/p>\n\n\n\n

    \"\"
    Neo4j – Change Password Dialogue<\/figcaption><\/figure>\n\n\n\n

    Once this is complete neo4j should be installed and working<\/p>\n\n\n\n

    \"\"
    Neo4j Web Console<\/figcaption><\/figure>\n\n\n\n

    Leave this running and open a new terminal to start Bloodhound by typing<\/p>\n\n\n\n

    $ BloodHound<\/p>\n\n\n\n

    you should be prompted with this screen<\/p>\n\n\n\n

    \"\"
    BloodHound Login Screen<\/figcaption><\/figure>\n\n\n\n

    If you didn’t change the default password for the neo4j database you will see this error, go back and change the password.<\/p>\n\n\n\n

    \"\"
    BloodHound Login Screen (password error)<\/figcaption><\/figure>\n\n\n\n

    If all is well you should see this<\/p>\n\n\n\n

    \"\"
    BloodHound opening screen (No Data)<\/figcaption><\/figure>\n\n\n\n

    In Part 2 I’ll discuss more about running SharpHound and collecting data.<\/p>\n","protected":false},"excerpt":{"rendered":"

    Part 1 – Installing The Software I was asked to investigate the use of BloodHound to see if it might provide some insight into Active Directory and its privileges and trusts at work. I decided to install this onto my home lab first and this post will cover what I did to install the software, […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ocean_post_layout":"","ocean_both_sidebars_style":"","ocean_both_sidebars_content_width":0,"ocean_both_sidebars_sidebars_width":0,"ocean_sidebar":"","ocean_second_sidebar":"","ocean_disable_margins":"enable","ocean_add_body_class":"","ocean_shortcode_before_top_bar":"","ocean_shortcode_after_top_bar":"","ocean_shortcode_before_header":"","ocean_shortcode_after_header":"","ocean_has_shortcode":"","ocean_shortcode_after_title":"","ocean_shortcode_before_footer_widgets":"","ocean_shortcode_after_footer_widgets":"","ocean_shortcode_before_footer_bottom":"","ocean_shortcode_after_footer_bottom":"","ocean_display_top_bar":"default","ocean_display_header":"default","ocean_header_style":"","ocean_center_header_left_menu":"","ocean_custom_header_template":"","ocean_custom_logo":0,"ocean_custom_retina_logo":0,"ocean_custom_logo_max_width":0,"ocean_custom_logo_tablet_max_width":0,"ocean_custom_logo_mobile_max_width":0,"ocean_custom_logo_max_height":0,"ocean_custom_logo_tablet_max_height":0,"ocean_custom_logo_mobile_max_height":0,"ocean_header_custom_menu":"","ocean_menu_typo_font_family":"","ocean_menu_typo_font_subset":"","ocean_menu_typo_font_size":0,"ocean_menu_typo_font_size_tablet":0,"ocean_menu_typo_font_size_mobile":0,"ocean_menu_typo_font_size_unit":"px","ocean_menu_typo_font_weight":"","ocean_menu_typo_font_weight_tablet":"","ocean_menu_typo_font_weight_mobile":"","ocean_menu_typo_transform":"","ocean_menu_typo_transform_tablet":"","ocean_menu_typo_transform_mobile":"","ocean_menu_typo_line_height":0,"ocean_menu_typo_line_height_tablet":0,"ocean_menu_typo_line_height_mobile":0,"ocean_menu_typo_line_height_unit":"","ocean_menu_typo_spacing":0,"ocean_menu_typo_spacing_tablet":0,"ocean_menu_typo_spacing_mobile":0,"ocean_menu_typo_spacing_unit":"","ocean_menu_link_color":"","ocean_menu_link_color_hover":"","ocean_menu_link_color_active":"","ocean_menu_link_background":"","ocean_menu_link_hover_background":"","ocean_menu_link_active_background":"","ocean_menu_social_links_bg":"","ocean_menu_social_hover_links_bg":"","ocean_menu_social_links_color":"","ocean_menu_social_hover_links_color":"","ocean_disable_title":"default","ocean_disable_heading":"default","ocean_post_title":"","ocean_post_subheading":"","ocean_post_title_style":"","ocean_post_title_background_color":"","ocean_post_title_background":0,"ocean_post_title_bg_image_position":"","ocean_post_title_bg_image_attachment":"","ocean_post_title_bg_image_repeat":"","ocean_post_title_bg_image_size":"","ocean_post_title_height":0,"ocean_post_title_bg_overlay":0.5,"ocean_post_title_bg_overlay_color":"","ocean_disable_breadcrumbs":"default","ocean_breadcrumbs_color":"","ocean_breadcrumbs_separator_color":"","ocean_breadcrumbs_links_color":"","ocean_breadcrumbs_links_hover_color":"","ocean_display_footer_widgets":"default","ocean_display_footer_bottom":"default","ocean_custom_footer_template":"","ocean_post_oembed":"","ocean_post_self_hosted_media":"","ocean_post_video_embed":"","ocean_link_format":"","ocean_link_format_target":"self","ocean_quote_format":"","ocean_quote_format_link":"post","ocean_gallery_link_images":"on","ocean_gallery_id":[],"footnotes":""},"categories":[70,71,2],"tags":[72,74,73,75],"class_list":["post-420","post","type-post","status-publish","format-standard","hentry","category-active-directory","category-bloodhound","category-cybersec","tag-bloodhound","tag-kali","tag-linux","tag-neo4j","entry"],"_links":{"self":[{"href":"https:\/\/vroamam.com\/wordpress\/wp-json\/wp\/v2\/posts\/420","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vroamam.com\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vroamam.com\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vroamam.com\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/vroamam.com\/wordpress\/wp-json\/wp\/v2\/comments?post=420"}],"version-history":[{"count":16,"href":"https:\/\/vroamam.com\/wordpress\/wp-json\/wp\/v2\/posts\/420\/revisions"}],"predecessor-version":[{"id":467,"href":"https:\/\/vroamam.com\/wordpress\/wp-json\/wp\/v2\/posts\/420\/revisions\/467"}],"wp:attachment":[{"href":"https:\/\/vroamam.com\/wordpress\/wp-json\/wp\/v2\/media?parent=420"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vroamam.com\/wordpress\/wp-json\/wp\/v2\/categories?post=420"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vroamam.com\/wordpress\/wp-json\/wp\/v2\/tags?post=420"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}