// what it is
Description
@CptJesus / @harmj0y / @wald0's Neo4j-backed AD attack-path tool. Ingests JSON from SharpHound and lets you query 'shortest path from <owned user> to Domain Admin', 'where can this user RDP', and so on.
// use cases
What people use it for
- Find shortest path to Domain Admin
- Enumerate AD ACL misconfigs
- Discover Kerberoastable accounts
// commands
The commands you'll type
Run BloodHound CE
$ docker run -p 8080:8080 specterops/bloodhound:latest