Install Bloodhound on Ubuntu

Install_Bloodhound_README.md

Install Bloodhound on Ubuntu

References:

• https://github.com/BloodHoundAD/BloodHound
• https://blog.cobaltstrike.com/2016/12/14/my-first-go-with-bloodhound/
• https://popped.io/setting-up-bloodhound-on-debian-jessie/

Install Ubuntu

Install Ubuntu as you normally would. In this case Xubuntu 16.04 was install in VMWare

Optional - Install VM Tools

sudo apt-get update
sudo apt-get upgrade 
sudo apt-get install open-vm-tools open-vm-tools-desktop 
reboot

sudo apt-get install wget curl git

## Optional
wget -qO - https://download.sublimetext.com/sublimehq-pub.gpg | sudo apt-key add -
echo "deb https://download.sublimetext.com/ apt/stable/" | sudo tee /etc/apt/sources.list.d/sublime-text.list
sudo apt-get update
sudo apt-get install sublime-text
## --------------------

wget -O - https://debian.neo4j.org/neotechnology.gpg.key | sudo apt-key add -
echo 'deb http://debian.neo4j.org/repo stable/' | sudo tee /etc/apt/sources.list.d/neo4j.list
echo "deb http://httpredir.debian.org/debian jessie-backports main" | sudo tee -a /etc/apt/sources.list.d/jessie-backports.list

sudo apt-get update
sudo apt-get install openjdk-8-jdk openjdk-8-jre
sudo apt-get install neo4j
echo "dbms.active_database=graph.db" >> /etc/neo4j/neo4j.conf
echo "dbms.connector.http.address=0.0.0.0:7474" >> /etc/neo4j/neo4j.conf
echo "dbms.connector.bolt.address=0.0.0.0:7687" >> /etc/neo4j/neo4j.conf
echo "dbms.allow_format_migration=true" >> /etc/neo4j/neo4j.conf

Get Bloodhound DB for neo4j

git clone https://github.com/adaptivethreat/BloodHound.git
cd BloodHound
mkdir /var/lib/neo4j/data/databases/graph.db
cd BloodHound/
cp -R BloodHoundExampleDB.graphdb/* /var/lib/neo4j/data/databases/graph.db
neo4j start
netstat -lantp

Change neo4j password

Logon to http://localhost:7474 with neo4j:neo4j change password

Get Bloodhound binary

Download appropriate binary from https://github.com/BloodHoundAD/BloodHound/releases

Run Bloodhound

./Bloodhound enter neo4j password

heya this may need a little update.. some bits dont seem to be working on latest ubuntu...

admin-tic@bh:$ echo "deb https://download.sublimetext.com/ apt/stable/" | sudo tee /etc/apt/sources.list.d/sublime-text.list
deb https://download.sublimetext.com/ apt/stable/
admin-tic@bh:$ sudo apt-get update
Hit:1 http://au.archive.ubuntu.com/ubuntu jammy InRelease
Hit:2 http://au.archive.ubuntu.com/ubuntu jammy-updates InRelease
Hit:3 http://au.archive.ubuntu.com/ubuntu jammy-backports InRelease
Err:4 http://security.ubuntu.com/ubuntu jammy-security InRelease
403 Forbidden [IP: 91.189.91.81 80]
Get:5 https://download.sublimetext.com apt/stable/ InRelease [2,536 B]
Get:6 https://download.sublimetext.com apt/stable/ Packages [7,987 B]
Reading package lists... Done
E: Failed to fetch http://security.ubuntu.com/ubuntu/dists/jammy-security/InRelease 403 Forbidden [IP: 91.189.91.81 80]
E: The repository 'http://security.ubuntu.com/ubuntu jammy-security InRelease' is no longer signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: https://download.sublimetext.com/apt/stable/InRelease: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details.