bloodhound-quickwin

Simple script to extract useful informations from the combo BloodHound + Neo4j. Can help to choose a target.

Prerequisites

python3

pip3 install py2neo
pip3 install pandas

Example

Use your favorite ingestor to gather ".json"
Start your neo4j console
Import "*.json" in bloodhounnd
Run ./bhqc.py

Usage

[email protected] $ ./bhqc.py -h
usage: bhqc.py [-h] [-b BOLT] [-u USERNAME] [-p PASSWORD]

Quick win for bloodhound + neo4j

optional arguments:
  -h, --help            show this help message and exit
  -b BOLT, --bolt BOLT  Neo4j bolt connexion (default: bolt://127.0.0.1:7687)
  -u USERNAME, --username USERNAME
                        Neo4j username (default : neo4j)
  -p PASSWORD, --password PASSWORD
                        Neo4j password (default : neo4j)

Output

[email protected] $ ./bhqw.py

###########################################################
[*] Enumerating all domains admins (rid:512|544) (recursive)
###########################################################

[+] Domain admins (group) 	: DOMAIN [email protected]
[+] Domain admins (group) 	: ENTERPRISE [email protected]
[+] Domain admins (group) 	: [email protected]
[+] Domain admins (enabled) 	: [email protected] [LASTLOG: < 1 year]
[+] Domain admins (enabled) 	: DIRECTOR.TREN[email protected] [SPN] [LASTLOG:  NEVER]
[+] Domain admins (enabled) 	: [email protected] [ASREP] [LASTLOG:  NEVER]

###########################################################
[*] Enumerating privileges SPN
###########################################################

[+] SPN DA (enabled) 	: [email protected]

###########################################################
[*] Enumerating privileges AS REP ROAST
###########################################################

[+] AS-Rep Roast DA (enabled) 	: [email protected]

###########################################################
[*] Enumerating all SPN
###########################################################

[+] SPN (enabled) 	: [email protected]
[+] SPN (enabled) 	: [email protected]
[+] SPN (enabled) 	: [email protected]
[+] SPN (enabled) 	: [email protected] [AdminCount]
[+] SPN (enabled) 	: [email protected]
[+] SPN (disabled) 	: [email protected] [AdminCount]

###########################################################
[*] Enumerating AS-REP ROSTING
###########################################################

[+] AS-Rep Roast (enabled) 	: [email protected]
[+] AS-Rep Roast (enabled) 	: [email protected] [AdminCount]

###########################################################
[*] Enumerating Unconstrained account
###########################################################

[+] Unconstrained user (enabled) 	: [email protected]

###########################################################
[*] Enumerating Constrained account
###########################################################

[+] Constrained user (enabled) 	: [email protected] ['snmp/dc1.FBC.LAB']

###########################################################
[*] Enumerating Unconstrained computer
###########################################################

[+] Unconstrained computer (enabled) 	: DC1.FBC.LAB [Windows Server 2016 Standard]

###########################################################
[*] Stats
###########################################################

+--------------------------------------------+------------+-------+
|                Description                 | Percentage | Total |
+--------------------------------------------+------------+-------+
|                 All users                  |    N/A     |   21  |
|             All users (enabed)             |   85.71    |   18  |
|            All users (disabled)            |   14.29    |   3   |
|     Users with 'domain admins' rights      |   16.67    |   3   |
|      Not logged (all) since 6 months       |    0.0     |   0   |
|    Not logged (enabled) since 6 months     |    0.0     |   0   |
| Password not changed > 1 y (enabled only)  |    0.0     |   0   |
| Password not changed > 2 y (enabled only)  |    0.0     |   0   |
| Password not changed > 5 y (enabled only)  |    0.0     |   0   |
| Password not changed > 10 y (enabled only) |    0.0     |   0   |
|               Users with SPN               |   33.33    |   6   |
|          Users with AS REP ROAST           |   11.11    |   2   |
|      Users enabled and has never log       |   88.89    |   16  |
+--------------------------------------------+------------+-------+

Simple script to extract useful informations from the combo BloodHound + Neo4j

Related tags

Overview

bloodhound-quickwin

Prerequisites

Example

Usage

Output

Owner

A file-based quote bot written in Python

Yet another discord-BOT

SmsSender v3.0.0 - the script is designed to send free SMS to any number and with any text.

Twitter-bot - A Simple Twitter bot with python

This is a Innexia Group Manager Bot with many features

Prime Mega is a modular bot running on python3 with autobots theme and have a lot features.

Telegram Bot For Screenshot Generation.

Tracker to check the covid shot slot availability in India and send mobile alerts via Twilio Messaging Service.

Upbit(업비트) Cryptocurrency Exchange OPEN API Client for Python

Some python code to make twitter bots ;)

LHXP・Official "LH - Cyber Security" Discord Leveling-Bot

Simple Telegram Bot for generating BalckPearl BBCode Templates

A discord.py bot template with Cogs implemented.

A python API for BSCScan (Binance Smart Chain Explorer), available on PyPI.

PyDiscord, a maintained fork of discord.py, is a python wrapper for the Discord API.

A Sublime Text plugin that displays inline images for single-line comments formatted like `// ![](example.png)`.

CLI tool that checks who does and who does not follow you back on Instagram

simple discord token grabber with webhook hiding feature.

Get informed when your DeFI Earn CRO Validator is jailed or changes the commission rate.

SquireBot is a Discord bot designed to run and manage tournaments entirely within a Discord.