{"id":1305,"date":"2025-01-25T06:57:31","date_gmt":"2025-01-25T06:57:31","guid":{"rendered":"https:\/\/hackmybox.com\/?p=1305"},"modified":"2025-09-08T16:27:02","modified_gmt":"2025-09-08T16:27:02","slug":"bloodhound","status":"publish","type":"post","link":"https:\/\/hackmybox.com\/index.php\/2025\/01\/25\/bloodhound\/","title":{"rendered":"BloodHound: Tool for Analyzing and Securing Active Directory"},"content":{"rendered":"

(Insights from HTB Academy)<\/span><\/p><\/div><\/div>

From the previous module we learned credential enumeration techniques on Active Directory typically involve using a variety of methods to identify valid usernames and passwords on a network. These methods can include:<\/p>

\u2022 Password spraying:<\/span> This technique involves trying a list of common passwords against a large number of usernames.<\/p>

\u2022 Hash cracking:<\/span> This technique involves stealing hashed passwords from a network and then using a computer program to try to crack the hashes into plain text passwords.<\/p>

\u2022 Social engineering:<\/span> This technique involves tricking users into revealing their passwords or other sensitive information.<\/p>

TOOLS<\/span>  <\/span><\/p>

BloodHound:<\/span>  A free and open-source tool that can be used to visualize Active Directory relationships. BloodHound can be used to identify potential attack paths and to identify users who have high-level privileges.<\/p>

SharpHound:<\/span> A C# library that can be used to collect data from Active Directory. SharpHound can be used to collect the same data as PowerView, but it can also be used to collect additional data, such as the password hashes of users.<\/p><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>

Components of the Command:<\/span><\/h2>

SharpHound.exe is part of the BloodHound toolset, which is used for Active Directory (AD) enumeration and mapping attack paths.<\/p>

It helps identify misconfigurations and permissions in Active Directory environments that can lead to privilege escalation or lateral movement.<\/p><\/div><\/div>

\"\"<\/div><\/div>