AUTOMATING PARTS OF ACTIVE DIRECTORY PENTESTS WITH BLOODHOUND CE

Summary from the TLDR Cybersecurity newsletter

The latest BloodHound CE release brings useful enhancements, but the tool's Neo4j database also enables powerful custom queries to automatically find Active Directory weaknesses. This post demonstrates examples of querying the database directly or via API to uncover basic flaws and augment BloodHound's graph visualizations and attack path planning.