BloodHound
BloodHound copied to clipboard
[Feature Request]: Importing owned users
Hey,
during engagements I found tagging objects as "owned" or as "high value" quite usefull. However doing this purely manually via right clicks in the GUI seems quite the hazzle and I was thinking about better approaches for this. First thing that came to my mind was importing a list of elements via an update query for neo4j but maybe it would be even better to implement a feature for batch updating directly into the BloodHound GUI.
Any thoughts on that?
Cheers..
Right now, our internal solution for this is a simple python script to bulk import it. Batch importing owned users would require some sort of coherent file format for that, which I'll have to give some thought too
I'm sure you can do that via cypherDog and neo4j. I've added several fields, one that add top 5 vulnerabilities to a list of computers from e.g. nessus data, text file/csv file.
You can try this node script that imports owned users from a file in mass. Also example cypher query to find paths from owned users to privileged groups. https://gist.github.com/rboddy/259cfebe8212bc99a2eba7f7441caf62
Still a very relevant feature to add, any update on this?
There's a nice python script which does it: https://github.com/xalicex/import-owned-users-bloodhound