# Post Compromise Enumeration

### POWERVIEW

{% embed url="<https://github.com/PowerShellMafia/PowerSploit/blob/master/Recon/PowerView.ps1>" %}

{% embed url="<https://gist.github.com/HarmJ0y/184f9822b195c52dd50c379ed3117993>" %}

![](https://1087083005-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-Mb1qWEo9hJOOrqtKQKZ%2F-MbvWcl5em9-hAmI71A8%2F-MbvX0gYjvnSgscG5YNj%2Fimage.png?alt=media\&token=011c2d80-6dd1-48d4-852c-69d0613bc8b1)

### SharpHound

{% embed url="<https://github.com/BloodHoundAD/BloodHound/blob/master/Collectors/SharpHound.ps1>" %}

<pre><code><strong>PS>
</strong><strong>Import-Module C:\Enterprise-Share\sharphound.ps1
</strong>Invoke-BloodHound -CollectionMethod All

ie. a zip will be created that we can import in Bloodhound in below format:
20211217084021_BloodHound.zip
</code></pre>

### BLOODHOUND

{% embed url="<https://bloodhound.readthedocs.io/en/latest/installation/linux.html>" %}

```
sudo apt-get install neo4j
sudo neo4j console
```

This would run the neo4j service. \
INFO Bolt enabled on localhost:7687\
INFO Remote interface available at <http://localhost:7474/>

Default Credentials: neo4j/neo4j

If there is password error while logging in,

1. Stop neo4j if its running
2. edit /etc/neo4j/neo4j.conf, and uncomment `dbms.security.auth_enabled=false`
3. connect to the database and run

   ALTER USER neo4j SET PASSWORD 'mynewpass'; :exit
4. Stop neo4j
5. comment out the `dbms.security.auth_enabled=false`
6. start neo4j

```
apt install bloodhound
```

setup neo4j console and open it in browser to access. We can run invoke-bloodhound to collect data and import it in neo4j localhost to get idea about AD.&#x20;

{% embed url="<https://github.com/BloodHoundAD/BloodHound/blob/master/Collectors/SharpHound.ps1>" %}

![](https://1087083005-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-Mb1qWEo9hJOOrqtKQKZ%2F-MbvaWTe4a-KeTA3sCTU%2F-Mbvarimw6uGaN5v4Ad4%2Fimage.png?alt=media\&token=57a3a251-7297-47cc-b4ea-331f6eb36be7)

![](https://1087083005-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-Mb1qWEo9hJOOrqtKQKZ%2F-MbvauaZy-JuNozMI4wa%2F-MbvbXdex8U0CPuH7Cpe%2Fimage.png?alt=media\&token=35b8afbc-359b-4725-85bc-b4370131afe8)
