BloodHound CE Tutorial Maps Active Directory Attack Paths

Summary

A hands-on tutorial demonstrates BloodHound CE and SharpHound in an intentionally vulnerable Active Directory lab, examining privileges and attack paths while noting collector errors that may have limited results.

Key points

• The presenter installs BloodHound CE on Kali and explains how collected directory data is imported for graph-based analysis.
• The demonstration uses SharpHound to collect data from a lab domain, then uploads the resulting archive through the web interface.
• The presenter inspects group membership, remote access privileges, active sessions and paths to domain administration.
• Queries reveal potential delegation and certificate-related attack paths in the intentionally vulnerable environment.
• SharpHound produced exceptions, and the presenter suspects incomplete collection; the cause was not established.
• The presenter favors the web interface for teamwork and observed smooth graph rendering, but could not find the legacy interface's backspace navigation.