Introduction & Installation

https://github.com/PlumHound/PlumHound

sudo git clone <https://github.com/PlumHound/PlumHound.git>
cd /PlumHound
sudo pip3 install -r requirements.txt

<aside> 💡

You must ensure bloodhound and neo4j console are up and running while trying to run Plumhound. This is because Plumhound is going to get data from bloodhound and analyze it.

</aside>

Testing

sudo python3 PlumHound.py --easy -p kali

• --easy: Quick and less invasive Active Directory enumeration
• -p: neo4j password

Expected Output

Perform Default Task

sudo python3 PlumHound.py -x tasks/default.tasks -p kali

• -x: Specify a task list file
• tasks/default.tasks: This is the path to the specific task file
  • Task files define a set of queries or actions that PlumHound will perform against the target Active Directory environment. These tasks typically focus on gathering specific types of information related to AD enumeration, such as:
    • User information
    • Group memberships
    • Permissions
    • Trusts
    • Other relevant data points for privilege escalation analysis
  • By specifying a particular .tasks file, you can customize the tasks that PlumHound will execute, or you can use the default task list for a general assessment. The file default.tasks includes a predefined set of tasks that are often enough for most use cases.
  • See GitHub documentation for more detailed explanation
• -p: neo4j password