A GUI wrapper inside of Havoc to interact with bloodhound CE
I recommend installing this module through the havoc store only since the module is dependant on beeing located inside of the data/extentions folder inside of havoc:
You will need an instance of BloodHound Community Edition more on that here. You will then need to download your collector from the web interface inside of the Gear > Download Collectors:
From there inside of the module you can specify it inside of Bloodhound > SharpHound:
Make sure you save your changes for persistance. You will then need to generate API keys inside of bloodhound CE and supply them to the script through BloodHound > Settings:
Like before make sure you save everything for persistance.
From here you can then use the bloodhound command inside of havoc to run your collector and upload the zip file after your downloaded it. Note that the arguments of the collector are defined inside of the SharpHound menu.
02/01/2024 22:26:13 [leo] Demon » help bloodhound
- Command : bloodhound
- Description : A command to manage bloodhound related things
Command Description
--------- -------------
collect Run the Bloodhound collector on the target machine (aka: SharpHound)
upload Upload the zip file to the api
02/01/2024 22:26:17 [leo] Demon » help bloodhound upload
- Command : bloodhound upload
- Description : Upload the zip file to the api
- Example : bloodhound upload /data/ c:\file\number_BloodHound.zip
- Required Args : 2
- Add a unconstrained delegation command search (if user is NTAuthority search from machine else search from exploited user
- Path finding, same functionality as search but takes current user / computer and target searched item