BloodHound 3.0
This is a major feature release for BloodHound, introducing several new features, optimizations, and bugfixes.
OLD DATABASES WILL NOT BE COMPATIBLE WITH BLOODHOUND 3.0
Changelog
New Edges
Added the following new attack paths/edges
- ReadGMSAPassword - The ability to read the password of a Group Managed Service Account
- HasSIDHistory - The ability to authenticate automatically as another user from a domain migration
- CanPSRemote - The ability to start a PSremote session with the remote computer (membership in the Remote Management Users group) (Thanks to @RiccardoAncarani for the original PR)
- ACL Control for OUs
User Interface
- Security Fixes (Thanks to @moloch, @6661620a)
- Reworked node displays to support collapsing data
- Added a confirmation dialog for drawing large graphs
- Prevented expensive queries from running automatically, now requires user input
- Improved Dark Mode support
SharpHound
- Complete rewrite, targetting .Net 4.5.
- Options have completely changed, use SharpHound.exe --help
- Performance and accuracy improvements across the board
- Database index changed from name to objectid (SID/GUID)