Bloodhound-Portable

Six Degrees of Domain Admin

BloodHound Portable for Windows (You can run this without local admin. No Administrator required)

Presentation

1. Download the .bat file
2. Run as a normal domain user
3. Alternatively you can use Runas.exe inside of a VM under domain user context with runas /netonly /user:"US.COMPANY.DOMAIN.COM\[email protected]" cmd or try /user:"DOMAIN\USERNAME" to run SharpHound.exe

Parse Sharphound Output Pretty_Bloodhound.py

** You may need to whitelist or disable Bloodhound/Sharphound in your Endpoint Security Software ( Or just obfucate it if your lucky... Resource Hacker or echo '' >> Sharphound.exe etc ... ) **

** Last tested Bloodhound 4.1.0 **

Credit: https://bloodhound.readthedocs.io/en/latest/_images/SharpHoundCheatSheet.png