bloodhound 开源项目推荐（224 个）

lefayjey /linWinPwn

linWinPwn 是一个 bash 脚本，可简化多种 Active Directory 工具的使用

PlumHound /PlumHound

蓝色和紫色团队的警犬报道

NH-RED-TEAM /RustHound

用 Rust 编写的 BloodHound Legacy Active Directory 数据摄取器。

SKempin /reactjs-tmdb-app

Responsive React 'The Movie Database' (TMDb) App

ADScanPro /adscan

免费 Active Directory 渗透测试工具，适用于 Linux、macOS 和 Windows。自动化 AD 和 LDAP 枚举、Kerberoasting、ASREPRoast、密码喷洒、ADCS/ESC1、DCSync、RBCD、gMSA、影子凭据、NTLM 中继和凭据转储，涵盖 104 种技术，将 BloodHound 兼容的攻击路径映射到 Domain Admin。提供 NIS2 / ISO 27001 报告。

ovotech /gitoops

all paths lead to clouds

The-Viper-One /Pentest-Everything

CTF 解题报告、渗透测试主题、指南和笔记合集。笔记汇编自多个来源及我自己的实验研究。主题也支持 OSCP、Active Directory、CRTE、eJPT 和 eCPPT。

g0h4n /RustHound-CE

用 Rust 编写的 BloodHound Community Edition Active Directory 数据摄取器，支持通过 LDAP(S) 或 ADWS 协议。

GoFetchAD /GoFetch

GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.

knavesec /Max

Maximizing BloodHound. Max is a good boy.

BloodHoundAD /SharpHound2

旧版 BloodHound C# Ingestor（已弃用）

idnahacks /GoodHound

Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.

adithyan-ak /AgentHound

Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI services. BloodHound for the agentic stack.

fortalice /bofhound

从ldapsearch BOF、pyldapsearch和Brute Ratel的LDAP Sentinel编写的日志生成兼容BloodHound的JSON。

MorDavid /BloodHound-MCP-AI

BloodHound-MCP-AI 是通过模型上下文协议将 BloodHound 与 AI 连接的集成，使安全专业人员能够使用自然语言而非复杂的 Cypher 查询来分析 Active Directory 攻击路径。

improsec /ImproHound

Identify the attack paths in BloodHound breaking your AD tiering

p0dalirius /ShareHound

A python tool to map the access rights of network shares into a BloodHound OpenGraphs easily

1r0BIT /TaskHound

Tool to enumerate privileged Scheduled Tasks on Remote Systems

seajaysec /cypheroth

Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets.

NetSPI /AD-PathFinder

使用 BloodHound CE + OpenGraph 数据，为 Active Directory、ADCS、SCCM 和 MSSQL 绘制攻击路径。