Plumhound
bloddhound for purple and blue teams
Plumhound Installation
┌──(kali㉿kali)-[/opt]
└─$ sudo git clone https://github.com/PlumHound/PlumHound
[sudo] password for kali:
Cloning into 'PlumHound'...
remote: Enumerating objects: 3256, done.
remote: Counting objects: 100% (118/118), done.
remote: Compressing objects: 100% (55/55), done.
remote: Total 3256 (delta 86), reused 77 (delta 63), pack-reused 3138 (from 1)
Receiving objects: 100% (3256/3256), 6.11 MiB | 1010.00 KiB/s, done.
Resolving deltas: 100% (1234/1234), done.We need to have neo4j and bloodhound running and data already injested
Running Plumhound
sudo
Runs the command with superuser privileges. This is often required if the script needs access to system resources or certain protected files.
python3
Uses the Python 3 interpreter to run the script.
PlumHound.py
This is the Python script being executed — PlumHound is a tool used for analyzing BloodHound/Neo4j data (usually related to Active Directory recon).
--easy
This is a flag/option that likely tells the script to run in a simplified or beginner-friendly mode. It might automate or simplify certain tasks (you'll need to check the script's help output or documentation for exact behavior).
-p neo4j1
This sets the -p option to neo4j1. In the context of PlumHound, this is likely specifying a profile or Neo4j database connection name or password for connecting to the BloodHound database backend.
✅ Use the default.tasks file to determine what analysis to run
The reports are save in reports folder
You can now index.html file and explore it.
Last updated