Join us at Black Hat 2025 for training, open-source tools, and insights in identity security. Learn More
Open Source Tools

BloodHound Community Edition

BloodHound leverages graph theory to reveal hidden and often unintended relationships across identity and access management systems. Powered by OpenGraph, BloodHound now supports comprehensive analysis beyond Active Directory and Azure environments, enabling users to map complex privilege relationships across diverse identity platforms. Attackers can utilize BloodHound to rapidly discover sophisticated attack paths otherwise impossible to identify manually, while defenders can proactively identify and mitigate these risks. Both red and blue teams benefit from BloodHound’s expanded capabilities, gaining deeper insights into identity and privilege structures across their entire security landscape.

Download on GitHub
BloodHound Community Edition

Explore other tools

Ghostwriter

Ghostwriter is a Django web app for red teams to track projects, clients, assets, reports, and evidence.

Ghostwriter

Read more

Mythic

Mythic is an open-source Command and Control (C2) framework designed around a microservice architecture.

Mythic

Read more

Nemesis 2.0

Nemesis 2.0 functions as an "offensive VirusTotal," automatically processing files collected during security assessments through an extensive pipeline of specialized analyzers.

Nemesis 2.0

Read more

Join the Conversation

Learn from others and share your story on the BloodHoundGang Slack Community

Connect with us

You might also be interested in

Cover of the State of APM report
White Papers

The State of Attack Path Management

Our inaugural report highlights why Identity Security is increasingly complex, and why it's difficult to execute without Attack Path Management. We're shifting the conversation from static checklists to the dynamic attack graph.

Read more

Datasheets

Go Beyond Traditional Boundaries with Privilege Zones in BloodHound

Identity security practices have long supported a model of separating assets into secure management categories as part of a privileged access strategy, whether those be legacy directory services systems or modern hybrid or cloud environments. The most critical assets are often classified as Tier Zero (or the Control Plane).

Read more

Purple SpecterOps logo
White Papers

The Renaissance of NTLM Relay Attacks: Everything You Need to Know

NTLM relay attacks are still viable and more dangerous than ever, despite the common belief that the problem has been solved or minimized.

Read more