DΛΣMӨП

Catalog WADComs

WAD · Tool

SharpHound

2 techniques Windows · ActiveDirectoryWADComs GPL-3.0

SharpHound-LDAP

Privilege EscalationEnumeration WindowsActiveDirectory

SharpHound.exe is the official data collector for BloodHound, written in C# and uses Windows API functions and LDAP namespace functions to collect data from domain controllers and domain-joined Windows systems. This data can then be fed into BloodHound to enumerate potential paths of privilege escalation. The following command peforms all collection methods and will use the provided LDAP credentials when performing LDAP collection methods, and stores the output in a zip file that can be directly placed in the BloodHound GUI. Command Reference: LDAP Username: john LDAP Password: password123 Output File: output.zip 

SharpHound.exe --CollectionMethods All --LdapUsername john --LdapPassword password123 --ZipFileName output.zip
Native
PrivEsc, Enumeration
Requires
Shell, Username, Password
Services
LDAP

Privilege Escalation

Privilege EscalationEnumeration Windows

SharpHound.exe and SharpHound.ps1 are the official data collector for BloodHound, written in C# or Powershell and uses Windows API functions and LDAP namespace functions to collect data from domain controllers and domain-joined Windows systems. This data can then be fed into BloodHound to enumerate potential paths of privilege escalation. The following command peforms all collection methods and stores the output in a zip file that can be directly placed in the BloodHound GUI. Command Reference: Output File: output.zip 

SharpHound.exe --CollectionMethods All --ZipFileName output.zip
#Using PowerShell module
powershell -ep bypass 
.\SharpHound.ps1
Invoke-BloodHound -CollectionMethod All -Domain domain.tld -ZipFileName output.zip
Native
PrivEsc, Enumeration
Requires
Shell