BloodHoundAD / BloodHound

Six Degrees of Domain Admin
GNU General Public License v3.0
9.62k stars 1.7k forks source link

Added Installation Instructions and Troubleshooting for Windows + New SharpHound Flags #646

Closed LuemmelSec closed 1 year ago

LuemmelSec commented 1 year ago

I ran across several issues lately, often times related to the neo4j setup on Windows systems.

I documented and added them accordingly with screenshots and solutions.

Also did an update to the OpenJDK installation and an alternative to the Oracle implementation.

1 2 3 4

Lastely created a video where everything is covered as well:

https://www.youtube.com/watch?v=PgjtvxA-MMk

github-actions[bot] commented 1 year ago

CLA Assistant Lite bot All contributors have signed the CLA ✍️ ✅

LuemmelSec commented 1 year ago

I have read the CLA Document and I hereby sign the CLA

martinsohn commented 1 year ago

Great instructions! A few notes after following it:

LuemmelSec commented 1 year ago

Great instructions! A few notes after following it:

  • The NEO4J_CONF and NEO4J_HOME variables are not present in my setup, yet no errors were outputted and Neo4j works.
  • The directory which the Neo4j zip file is unzipped to and installed from ("install-service") will be the directory of the Neo4j services. It can be recommended to unzipped it to "Program Files\Neo4j" prior to service installation.

Thanks for looking through the doc, much appreciated. The two environment variables do not get auto created. I ran into the issues several times, always in Commando VMs. I included screenshots in the final documentation, but didn't run into the problem during the final recording of the video. However in any case creating the two variables made things work. I guess it is due to the old neo4j installation that comes shipped with the CommandoVM might be the culprit. If everything works fine, even better. But if you run into it, the solution is here.

I everytime have something like c:\tools where I put all my stuff. But I think that is something of a personal decision. I can suggest that, but are there any benefits to explictly put it there?

martinsohn commented 1 year ago

are there any benefits to explictly put it there [program files]?

For your every day security professional running it in a VM, no. But yes for orgs who deploy it on prod servers, as Program Files is write protected from low priv users.

LuemmelSec commented 1 year ago

I seem to be to dumb to split PRs. So this PR also includes the changes needed to comply to the SharpHound addition for the Local Admin Session Enumeration: https://github.com/BloodHoundAD/SharpHoundCommon/pull/47 https://github.com/BloodHoundAD/SharpHound/pull/40

image

JonasBK commented 1 year ago

Hey @LuemmelSec,

Thanks for this super awesome contribution!

We will release a small 4.3.1 update very soon and would like to have your changes to the Windows installation included. We also want to merge in your new SharpHound flags but need more time to review the changes, so that will be in a later release.

Would you be able to split this PR into two, such that the changes to the Windows installation can be merged into 4.3.1?

LuemmelSec commented 1 year ago

Hi @JonasBK I tried to do so :) Please see PRs 664: https://github.com/BloodHoundAD/BloodHound/pull/664 665: https://github.com/BloodHoundAD/BloodHound/pull/665

Cheers Dan

JonasBK commented 1 year ago

Awesome, Dan! Thanks a lot for this great contribution! It is super helpful with the video as well :)