Install Bloodhound on Ubuntu

Install_Bloodhound_README.md

Installing BloodHound Community Edition (CE) on Linux

Follow these steps to install BloodHound CE using Docker on a Linux system.

1. Install Docker Ensure Docker is installed on your system. BloodHound CE relies on Docker Compose for deployment.

You can follow the official Docker installation guide for your distribution: https://docs.docker.com/engine/install/

2. Download BloodHound CLI

wget https://github.com/SpecterOps/bloodhound-cli/releases/latest/download/bloodhound-cli-linux-amd64.tar.gz

Note: Replace amd64 with your system architecture if necessary.

3. Extract

tar -xvzf bloodhound-cli-linux-amd64.tar.gz

4. Install BloodHound CE

Navigate to the directory where you extracted the bloodhound-cli binary and run:

./bloodhound-cli install

This command sets up the necessary Docker containers.

5. Access BloodHound CE

Once installed, the terminal will display:

• A randomly generated password for the admin user
• The URL to access the UI, usually:

http://127.0.0.1:8080/ui/login

Save the password shown in the terminal!

6. Log In and Change Password

Open the login URL in your browser and sign in with:

• Username: admin
• Password: (generated during install)

You'll be prompted to change your password after the first login.

More Information

Official Quickstart Guide:

🔗 https://bloodhound.specterops.io/get-started/quickstart/community-edition-quickstart#install-bloodhound-ce

---

Archived Instructions Bloodhound V4

NOTE: The following are outdated instructions prior to community edition and here for reference only.

References:

• https://github.com/BloodHoundAD/BloodHound
• https://blog.cobaltstrike.com/2016/12/14/my-first-go-with-bloodhound/
• https://popped.io/setting-up-bloodhound-on-debian-jessie/

Install Ubuntu

Install Ubuntu as you normally would. In this case Xubuntu 16.04 was install in VMWare

Optional - Install VM Tools

sudo apt-get update
sudo apt-get upgrade 
sudo apt-get install open-vm-tools open-vm-tools-desktop 
reboot

sudo apt-get install wget curl git

## Optional
wget -qO - https://download.sublimetext.com/sublimehq-pub.gpg | sudo apt-key add -
echo "deb https://download.sublimetext.com/ apt/stable/" | sudo tee /etc/apt/sources.list.d/sublime-text.list
sudo apt-get update
sudo apt-get install sublime-text
## --------------------

wget -O - https://debian.neo4j.org/neotechnology.gpg.key | sudo apt-key add -
echo 'deb http://debian.neo4j.org/repo stable/' | sudo tee /etc/apt/sources.list.d/neo4j.list
echo "deb http://httpredir.debian.org/debian jessie-backports main" | sudo tee -a /etc/apt/sources.list.d/jessie-backports.list

sudo apt-get update
sudo apt-get install openjdk-8-jdk openjdk-8-jre
sudo apt-get install neo4j
echo "dbms.active_database=graph.db" >> /etc/neo4j/neo4j.conf
echo "dbms.connector.http.address=0.0.0.0:7474" >> /etc/neo4j/neo4j.conf
echo "dbms.connector.bolt.address=0.0.0.0:7687" >> /etc/neo4j/neo4j.conf
echo "dbms.allow_format_migration=true" >> /etc/neo4j/neo4j.conf

Get Bloodhound DB for neo4j

git clone https://github.com/adaptivethreat/BloodHound.git
cd BloodHound
mkdir /var/lib/neo4j/data/databases/graph.db
cd BloodHound/
cp -R BloodHoundExampleDB.graphdb/* /var/lib/neo4j/data/databases/graph.db
neo4j start
netstat -lantp

Change neo4j password

Logon to http://localhost:7474 with neo4j:neo4j change password

Get Bloodhound binary

Download appropriate binary from https://github.com/BloodHoundAD/BloodHound/releases

Run Bloodhound

./Bloodhound enter neo4j password

I had no idea this reference was still being used. Updated to the latest.

Thank you!