Common solutions for Bloodhound-python errors, problems and issues

bloodhound-python_issues.txt

# @author Pichaya Morimoto ([email protected])
# Compiled list of my common bloodhound-python problems & solutions

Bloodhound-python Error #0
You do not get info like GPO and permission abuse edges.
You need to add option -> -c All,LoggedOn

Bloodhound-python Error #1
    raise NoNameservers(request=self.request, errors=self.errors)
dns.resolver.NoNameservers: All nameservers failed to answer the query _ldap._tcp.pdc._msdcs.DCHOSTNAME. IN SRV: Server 10.3.3.7 TCP port 53 answered SERVFAIL

You forgot: FQN 
From: -d domain -> -d domain.local

Or if you put -dc , you need -dc "${adz_hostname}.${adz}"
For example, DCHOSTNAME.domain.local

Bloodhound-python Error #2
    raise NoNameservers(request=self.request, errors=self.errors)
dns.resolver.NoNameservers: All nameservers failed to answer the query _ldap._tcp.pdc._msdcs.resourced. IN SRV: Server 10.3.3.7 TCP port 53 answered [Errno 111] Connection refused

You forgot: -ns -> -ns ${adz_rhost}
For example, -ns 10.3.3.7

Bloodhound-python Error #3
    raise Timeout(timeout=duration)
dns.exception.Timeout: The DNS operation timed out after 3.1057164669036865 seconds

Your AD is too slow. Add -> --dns-timeout 3600

Bloodhound-python Error #4
Sometimes DNS UDP/53 does not work (like filtered out by firewall)
You need to add option to use DNS TCP/53 -> --dns-tcp