{"id":13803259,"url":"https://github.com/BloodHoundAD/SharpHound3","last_synced_at":"2025-05-13T15:32:54.391Z","repository":{"id":40906613,"uuid":"213738699","full_name":"BloodHoundAD/SharpHound3","owner":"BloodHoundAD","description":"C# Data Collector for the BloodHound Project, Version 3","archived":true,"fork":false,"pushed_at":"2022-06-22T22:03:52.000Z","size":260,"stargazers_count":519,"open_issues_count":16,"forks_count":156,"subscribers_count":25,"default_branch":"master","last_synced_at":"2024-08-05T01:10:13.995Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"C#","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/BloodHoundAD.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2019-10-08T19:47:55.000Z","updated_at":"2024-05-13T22:39:39.000Z","dependencies_parsed_at":"2022-08-23T01:40:54.264Z","dependency_job_id":null,"html_url":"https://github.com/BloodHoundAD/SharpHound3","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/BloodHoundAD%2FSharpHound3","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/BloodHoundAD%2FSharpHound3/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/BloodHoundAD%2FSharpHound3/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/BloodHoundAD%2FSharpHound3/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/BloodHoundAD","download_url":"https://codeload.github.com/BloodHoundAD/SharpHound3/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225239729,"owners_count":17442817,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-04T01:00:26.758Z","updated_at":"2024-11-18T19:31:28.334Z","avatar_url":"https://github.com/BloodHoundAD.png","language":"C#","readme":"# THIS IS NOW DEPRECATED IN FAVOR OF [SHARPHOUND](https://github.com/BloodHoundAD/SharpHound). DATA COLLECTED USING THIS METHOD WILL NOT WORK WITH BLOODHOUND 4.1+\n\n# SharpHound - C# Rewrite of the BloodHound Ingestor\n\n## Get SharpHound\n\nThe latest build of SharpHound will always be in the BloodHound repository [here](https://github.com/BloodHoundAD/BloodHound/tree/master/Collectors)\n\n## Compile Instructions\n\nSharpHound is written using C# 9.0 features. To easily compile this project, use Visual Studio 2019.\n\nIf you would like to compile on previous versions of Visual Studio, you can install the [Microsoft.Net.Compilers](https://www.nuget.org/packages/Microsoft.Net.Compilers/) nuget package.\n\nBuilding the project will generate an executable as well as a PowerShell script that encapsulates the executable. All dependencies are rolled into the binary.\n\n## Requirements\n\nSharpHound is designed targetting .Net 4.5. Sharphound must be run from the context of a domain user, either directly through a logon or through another method such as RUNAS.\n\n## More Information\n\n## Usage\n\n### Enumeration Options\n\n- **CollectionMethod** - The collection method to use. This parameter accepts a comma separated list of values. Has the following potential values (Default: Default):\n  - **Default** - Performs group membership collection, domain trust collection, local group collection, session collection, ACL collection, object property collection, and SPN target collection\n  - **Group** - Performs group membership collection\n  - **LocalAdmin** - Performs local admin collection\n  - **RDP** - Performs Remote Desktop Users collection\n  - **DCOM** - Performs Distributed COM Users collection\n  - **PSRemote** - Performs Remote Management Users collection\n  - **GPOLocalGroup** - Performs local admin collection using Group Policy Objects\n  - **Session** - Performs session collection\n  - **ComputerOnly** - Performs local admin, RDP, DCOM and session collection\n  - **LoggedOn** - Performs privileged session collection (requires admin rights on target systems)\n  - **Trusts** - Performs domain trust enumeration\n  - **ACL** - Performs collection of ACLs\n  - **Container** - Performs collection of Containers\n  - **DcOnly** - Performs collection using LDAP only. Includes Group, Trusts, ACL, ObjectProps, Container, and GPOLocalGroup.\n  - **ObjectProps** - Performs Object Properties collection for properties such as LastLogon or PwdLastSet\n  - **All** - Performs all Collection Methods except GPOLocalGroup\n- **Domain** - Search a particular domain. Uses your current domain if null (Default: null)\n- **Stealth** - Performs stealth collection methods. All stealth options are single threaded.\n- **ExcludeDomainControllers** - Excludes domain controllers from enumeration (avoids Microsoft ATA flags :) )\n- **ComputerFile** - Specify a file to load computer names/IPs from\n- **LdapFilter** - LDAP Filter to apppend to search\n- **OverrideUserName** - Overrides user name for session enumeration (advanced)\n- **RealDNSName** - Overrides DNS name for API calls\n- **CollectAllProperties** - Collect all string LDAP properties instead of a subset\n- **WindowsOnly** - Limit computer collection to systems with an operating system that matches \\*Windows\\*\n\n### Loop Options\n\n- **Loop** - Loop computer collections\n- **LoopDuration** - How long to loop for\n- **LoopInterval** - Duration to wait between loops\n\n### Connection Options\n\n- **DomainController** - Specify which Domain Controller to connect to (Default: null)\n- **LdapPort** - Specify what port LDAP lives on (Default: 0)\n- **SecureLdap** - Connect to AD using Secure LDAP instead of regular LDAP. Will connect to port 636 by default.\n- **LdapUsername** - Username to connect to LDAP with. Requires the LDAPPassword parameter as well (Default: null)\n- **LdapPassword** - Password for the user to connect to LDAP with. Requires the LDAPUser parameter as well (Default: null)\n- **DisableKerberosSigning** - Disables LDAP encryption. Not recommended.\n\n### Performance Options\n\n- **PortScanTimeout** - Specifies the timeout for ping requests in milliseconds (Default: 2000)\n- **SkipPortScan** - Instructs Sharphound to skip ping requests to see if systems are up\n- **Throttle** - Adds a delay after each request to a computer. Value is in milliseconds (Default: 0)\n- **Jitter** - Adds a percentage jitter to throttle. (Default: 0)\n\n### Output Options\n\n- **OutputDirectory** - Folder in which to store JSON files (Default: .)\n- **OutputPrefix** - Prefix to add to your JSON files (Default: \"\")\n- **NoZip** - Don't compress JSON files to the zip file. Leaves JSON files on disk. (Default: false)\n- **EncryptZip** - Add a randomly generated password to the zip file.\n- **ZipFileName** - Specify the name of the zip file\n- **RandomizeFilenames** - Randomize output file names\n- **PrettyJson** - Outputs JSON with indentation on multiple lines to improve readability. Tradeoff is increased file size.\n- **DumpComputerStatus** - Dumps error codes from connecting to computers\n\n### Cache Options\n\n- **CacheFileName** - Filename for the Sharphound cache. (Default: \u003cB64 Machine Sid\u003e.bin)\n- **NoSaveCache** - Don't save the cache file to disk. Without this flag, \u003cB64 Machine Sid\u003e.bin will be dropped to disk\n- **InvalidateCache** - Invalidate the cache file and build a new cache\n\n### Misc Options\n\n- **StatusInterval** - Interval to display progress during enumeration in milliseconds (Default: 30000)\n","funding_links":[],"categories":["Tools","C# #","C# (212)","Operating Systems"],"sub_categories":["Windows"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FBloodHoundAD%2FSharpHound3","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FBloodHoundAD%2FSharpHound3","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FBloodHoundAD%2FSharpHound3/lists"}