BloodHound CE - BloodHound -内网信息搜集

bloodhound 有两个版本，所以搜集器需要与其对应
https://github.com/BloodHoundAD/BloodHound
https://github.com/SpecterOps/BloodHound

查看器

BloodHound CE 安装

# Add Docker's official GPG key:
sudo apt-get update
sudo apt-get install ca-certificates curl gnupg
sudo install -m 0755 -d /etc/apt/keyrings
curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
sudo chmod a+r /etc/apt/keyrings/docker.gpg

# Add the repository to Apt sources:
echo \
  "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/debian \
 bookworm stable" | \
  sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
sudo apt-get update

sudo apt-get install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin


curl -L https://ghst.ly/getbhce | docker compose -f - up

.zshrc

alias bh='curl -L https://ghst.ly/getbhce | docker compose -f - up'

搜集工具

https://github.com/BloodHoundAD/SharpHound

SharpHound.exe -c all --zipfilename doamin.zip --zippassword yutian -d white-bird.local

https://github.com/NH-RED-TEAM/RustHound

https://github.com/dirkjanm/BloodHound.py