brunoteixeira1996/gowned

Mark users as owned in BloodHound from Kerbrute

Mark users as owned in BloodHound from kerbrute output

Usage

$ kerbrute passwordspray list_of_users.txt --dc 192.168.30.51 --domain MARVEL.local 'P@ssword321' | gowned -source 'kerbrute' -output

    __             __               __
   / /_____  _____/ /_  _______  __/ /____
  / //_/ _ \/ ___/ __ \/ ___/ / / / __/ _ \
 / ,< /  __/ /  / /_/ / /  / /_/ / /_/  __/
/_/|_|\___/_/  /_.___/_/   \__,_/\__/\___/

Version: dev (n/a) - 03/08/24 - Ronnie Flathers @ropnop

2024/03/08 14:37:43 >  Using KDC(s):
2024/03/08 14:37:43 >   192.168.30.51:88

2024/03/08 14:37:43 >  [+] VALID LOGIN:  [email protected]:P@ssword321
2024/03/08 14:37:43 >  [+] VALID LOGIN:  [email protected]:P@ssword321
2024/03/08 14:37:43 >  [+] VALID LOGIN:  [email protected]:P@ssword321
2024/03/08 14:37:43 >  [+] VALID LOGIN:  [email protected]:P@ssword321
2024/03/08 14:37:43 >  Done! Tested 41 logins (4 successes) in 0.280 seconds
2024/03/08 14:37:43 Added [email protected] as owned
2024/03/08 14:37:43 Added [email protected] as owned
2024/03/08 14:37:43 Added [email protected] as owned
2024/03/08 14:37:43 Added [email protected] as owned

Note that is also possible to cat a kerbrute output file, something like

$ cat temp.txt | gowned -source 'kerbrute'