https://github.com/zeronetworks/BloodHound-Tools
Collection of tools that reflect the network dimension into Bloodhound's data
https://github.com/zeronetworks/BloodHound-Tools
Last synced: 22 days ago
JSON representation
Collection of tools that reflect the network dimension into Bloodhound's data
- Host: GitHub
- URL: https://github.com/zeronetworks/BloodHound-Tools
- Owner: zeronetworks
- License: apache-2.0
- Created: 2020-10-14T08:56:00.000Z (over 4 years ago)
- Default Branch: main
- Last Pushed: 2022-10-19T09:56:04.000Z (over 2 years ago)
- Last Synced: 2024-08-01T22:02:16.080Z (9 months ago)
- Language: Python
- Homepage:
- Size: 13.2 MB
- Stars: 433
- Watchers: 19
- Forks: 58
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- awesome-hacking-lists - zeronetworks/BloodHound-Tools - Collection of tools that reflect the network dimension into Bloodhound's data (Python)
README
# What is this?
A collection of tools that integrate to [BloodHound](https://github.com/BloodHoundAD/BloodHound).
Bloodhound is the defacto standard that both blue and red security teams use to find lateral movement and privilege escalation paths that can potentially be exploited inside an enterprise environment.
A typical environment can yield millions of paths, representing almost endless opportunities for red teams to attack and creating a seemingly insurmountable number of attack vectors for blue teams to tackle.
However, a critical dimension that Bloodhound ignores, namely network access, could hold the key to shutting down excessive lateral movement.
This repository contains tools that integrate with Bloodhound’s database in order to reflect network access, for the benefit of both red and blue teams.
Read more [here](https://zeronetworks.com/blog/adversary-resilience-via-least-privilege-networking-part-1/).
# Tools List
## ShotHound
Validate practical paths discovered by BloodHound with [CornerShot](https://github.com/zeronetworks/cornershot).
## Ransomulator
Simulate ransomware-like infection in your dataset.
## DBCreator
Simulate BloodHound dataset, along with "Open" network access edges and unpatched vulnerabilities information.
## CustomQueries
A list of common queries that reflect the network dimension, if it is integrated into the dataset.
## VulnerabilitiesDataImport
Parse Vulnerability Scanners reports and enrich host nodes with information about unpatched vulnerabilities