Command Manager

BloodHound.py CE Collector

Collect AD data into the BloodHound Community Edition JSON format from Linux. Use --zip for a single upload-ready archive. -c All runs every collection method; restrict with -c Group,LocalAdmin,Session for quieter runs.

Curated and verified by Ahmad Alawneh, penetration tester (OSCP+, CRTE) · Last updated

Tool
bloodhound-ce-python
Category
Enumeration / BloodHound Cypher Queries
Platform
linux
Requires
password
Protocols
LDAP, SMB

Open in Command Manager

Syntax

Angle-bracket tokens are placeholders — replace them with your target's values, or open this command in the app to fill them in and copy the result.

bloodhound-ce-python -u '<user>' -p '<password>' -d '<domain>' -ns <dc-ip> -c All --zip

Credential variants

The same attack using a different authentication material.

Hash Auth requires NTLM hash

bloodhound-ce-python -u '<user>' --hashes :<nt-hash> -d '<domain>' -ns <dc-ip> -c All --zip

Kerberos requires Kerberos ticket

bloodhound-ce-python -u '<user>' -k --no-pass -d '<domain>' -ns <dc-ip> -dc <dc-fqdn> -c All --zip

Stealth requires password

bloodhound-ce-python -u '<user>' -p '<password>' -d '<domain>' -ns <dc-ip> -c Group,Trusts,ACL,Container --zip

Examples

bloodhound-ce-python -u jdoe -p 'Password123!' -d corp.local -ns 10.10.10.10 -c All --zip

Tags

bloodhound bloodhound-ce collection python

References