BloodHoundAD/BloodHound
BloodHound
BloodHound is a graph-based security analysis tool designed to map trust relationships and attack vectors within Active Directory environments. It functions as an attack path mapper and risk assessment system that uses graph theory to identify hidden relationships and paths leading to high-privilege accounts.
The tool specializes in network attack surface mapping and privilege escalation pathfinding. It quantifies security risks by measuring the reliability of attack paths to critical targets, allowing for the prioritization of vulnerability elimination.
The system provides capabilities for directed graph visualization and permission-based path analysis. It utilizes query-driven data extraction to pull permission sets and group memberships, storing them in a schema-mapped format to calculate the shortest routes to high-value targets.
Features
- Active Directory Security Tools - Provides specialized utilities for identifying and mapping security vulnerabilities within Active Directory environments.
- Attack Path Mappers - Visualizes the chains of trust and permissions leading to high-privileged accounts in Active Directory.
- Heuristic Permission Analysis - Analyzes nested group memberships and delegated rights to identify privilege escalation vectors.
- Attack Path Graphs - Models Active Directory objects and permissions as directed graphs to uncover hidden attack paths.
- Attack Path Visualizations - Uses graph-based representations to visualize potential lateral movement routes and security vulnerabilities.
- Privilege Escalation Analysis - Identifies the sequence of compromised accounts and permissions needed to reach domain administrator privileges.
- Security Analysis Tools - Employs graph theory and automated inspection to identify hidden relationships and high-privilege paths.
- Data Access and Querying - Uses LDAP and RPC queries to extract permission sets and group memberships from domain controllers.
- Relationship Graph Visualizers - Provides a visual representation of trust relationships and access rights as directed node graphs.
- Attack Path Risk Assessments - Quantifies security risks by measuring the reliability of attack paths to critical targets.
- Vulnerability Prioritization - Measures the reliability of attack paths to prioritize the elimination of critical security vulnerabilities.
- Active Directory Auditing - Visualizes attack paths in Active Directory environments.
- Active Directory Exploitation - Graph-based tool for visualizing and analyzing AD attack paths.
- Active Directory Tools - Graph-based tool for visualizing Active Directory attack paths.
- Domain Exploitation - Graph-based analysis tool for Active Directory attack paths.
- Domain Situational Awareness - Visualizes attack paths and domain admin relationships.
- 安全与隐私 - Identifies complex attack paths in environments.
- Security Auditing Tools - Analyzes and visualizes attack paths within Active Directory environments.
- Security Tooling - Graph-based analysis of Active Directory attack paths.
