search

Plumhound

bloddhound for purple and blue teams

LogoGitHub - PlumHound/PlumHound: Bloodhound Reporting for Blue and Purple TeamsGitHubchevron-right

hashtag
Plumhound Installation

┌──(kali㉿kali)-[/opt]
└─$ sudo git clone https://github.com/PlumHound/PlumHound
[sudo] password for kali: 
Cloning into 'PlumHound'...
remote: Enumerating objects: 3256, done.
remote: Counting objects: 100% (118/118), done.
remote: Compressing objects: 100% (55/55), done.
remote: Total 3256 (delta 86), reused 77 (delta 63), pack-reused 3138 (from 1)
Receiving objects: 100% (3256/3256), 6.11 MiB | 1010.00 KiB/s, done.
Resolving deltas: 100% (1234/1234), done.

We need to have neo4j and bloodhound running and data already injestedarrow-up-right

hashtag
Running Plumhound

Part
Meaning

sudo

Runs the command with superuser privileges. This is often required if the script needs access to system resources or certain protected files.

python3

Uses the Python 3 interpreter to run the script.

PlumHound.py

This is the Python script being executed — PlumHound is a tool used for analyzing BloodHound/Neo4j data (usually related to Active Directory recon).

--easy

This is a flag/option that likely tells the script to run in a simplified or beginner-friendly mode. It might automate or simplify certain tasks (you'll need to check the script's help output or documentation for exact behavior).

-p neo4j1

This sets the -p option to neo4j1. In the context of PlumHound, this is likely specifying a profile or Neo4j database connection name or password for connecting to the BloodHound database backend.

✅ Use the default.tasks file to determine what analysis to run

The reports are save in reports folder

You can now index.html file and explore it.

PreviousBloodHoundNextBloodhound CE

Last updated