BashHound-CE

KO | EN

gitlite — search

#javascript #ai #typescript #golang #android #machine-learning #rust #docker #nodejs #java #windows #awesome #mcp #open-source

(★ 9)

Active Directory data collector for BloodHound written in Bash💲🐺

BashHound-CE Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

<div align="center">
  <img src="./img/bashhound_ce_logo.png" alt="BashHound Logo" width="200"/>
  
  # BashHound-CE

**Active Directory data collector for BloodHound Community Edition written in Bash**

[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
  [![BashHound](https://img.shields.io/badge/Tool-BashHound-00E2E8.svg)](https://github.com/0xbbuddha/BashHound)

*Bash • Fast • Stealth*

</div>

---

## Description

BashHound-CE is a BloodHound Community Edition data collector written in Bash, inspired by [RustHound](https://github.com/NH-RED-TEAM/RustHound) and [SharpHound](https://github.com/SpecterOps/SharpHound). It is designed to be compatible with Linux. It generates all the JSON files (v6 format) that can be analyzed by BloodHound CE.

**BashHound-CE vs BashHound:**
- **BashHound-CE**: Exports data in BloodHound CE format (version 6) - for BloodHound Community Edition
- **BashHound**: Exports data in legacy BloodHound format (version 5) - for classic BloodHound

BashHound was created as a technical challenge rather than for real-world use. Although the tool works, it is incomplete and not fully functional for advanced usage. Updates will be released regularly to improve it and make it increasingly functional.

---

## Usage

### Standart
```bash
bashhound-ce -d <domain.local> -u <user> -p <password> -f <dc.domain.local> 
```

### Options
```bash
-c, --collection METHOD
Collection Methods:
    All       - Collects all data (default)
    DCOnly    - Collects only from the DC (no sessions)
    Session   - Collects only sessions
    Trusts    - Collects only trusts
    ACL       - Collects only ACLs
    Group     - Collects only group memberships

--zip-only      Deletes JSON files after creating the ZIP file
--port          PORT LDAP port (default: 389 for LDAP, 636 for LDAPS)
--ldaps         Use LDAPS (TLS) - equivalent to --port 636
--no-tls        Force LDAP without TLS even on port 636
```

---

## Disclaimer

<div style="border: 2px solid red; background-color: #ffe6e6; padding: 10px; border-radius: 8px;">
  All tests were carried out on the DarkZero machine on Hack The Box. “TODO” notes have been added to the code to make it compatible with any server.
</div>

---

## Related Projects

- [RustHound](https://github.com/NH-RED-TEAM/RustHound) - BloodHound collector written in Rust
- [SharpHound](https://github.com/SpecterOps/SharpHound) - Official BloodHound collector written in C#
- [BloodHound](https://github.com/BloodHoundAD/BloodHound) - Active Directory relationship analysis tool

---

BashHound-CE

BashHound-CE Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

BashHound-CE

BashHound-CE Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README