https://appsec.fyi/tools.html#bloodhound Curated BloodHound resources from appsec.fyi en-us Sat, 29 Aug 2026 16:04:10 +0000 carl@chs.us (Carl Sampson) https://blog.n0pe-sled.com/2026/08/10/awshound-an-opensource-aws-opengraph-collector https://blog.n0pe-sled.com/2026/08/10/awshound-an-opensource-aws-opengraph-collector This content likely describes the use of BloodHound, a popular graph theory tool for exploring active directory attack paths, to visualize and analyze attack paths within Amazon Web Services (AWS) environments. It focuses on how BloodHound can be adapted or used in conjunction with AWS data to map potential security vulnerabilities and identify pathways an attacker might exploit to gain privileged access or move laterally within an AWS infrastructure. The goal is to improve security posture by understanding and mitigating these identified attack paths. BloodHound intermediate Thu, 20 Aug 2026 06:15:24 +0000 https://infosecwriteups.com/how-i-abused-a-group-policy-object-gpo-in-active-directory-and-how-to-fix-it-5d59c031e602 https://infosecwriteups.com/how-i-abused-a-group-policy-object-gpo-in-active-directory-and-how-to-fix-it-5d59c031e602 Writeup detailing Active Directory GPO abuse, demonstrating how misconfigured permissions on Group Policy Objects can lead to privilege escalation. The process involves using BloodHound to identify vulnerabilities like WriteDacl and WriteOwner on the Employees Policy GPO, and then provides steps to remediate by removing these excessive rights from the Delegation tab in Group Policy Management. BloodHound intermediate Sun, 19 Jul 2026 06:00:28 +0000 https://infosecwriteups.com/hack-smarter-city-council-active-directory-15ef3f2b3c1c https://infosecwriteups.com/hack-smarter-city-council-active-directory-15ef3f2b3c1c Writeup detailing the compromise of a City Council Active Directory environment, starting with only an IP address. The process involved initial port scanning with rustscan, web enumeration with gobuster, and reverse engineering an application executable with strings to uncover a service account. The service account's password was then extracted by intercepting application traffic with Wireshark. Finally, BloodHound was used to map the Active Directory structure via credentials obtained for the svc_services_portal account. BloodHound intermediate Thu, 02 Jul 2026 06:00:45 +0000