WEBVTT

00:00:01.240 --> 00:00:04.950
This virtual machine is a completely stocked Kali Linux installation.

00:00:05.540 --> 00:00:08.039
You could install BloodHound on pretty much anything.

00:00:08.210 --> 00:00:10.890
It simply requires installing Neo4j first,

00:00:11.030 --> 00:00:13.930
which might require installing Java on some systems.

00:00:14.150 --> 00:00:17.280
However, if you're using Kali Linux, it's in the repository,

00:00:17.290 --> 00:00:18.920
and it's updated pretty frequently,

00:00:18.920 --> 00:00:22.950
so I would recommend just using that and starting by running apt‑get update

00:00:22.950 --> 00:00:26.450
with sudo to be sure you're going to get the latest packages.

00:00:29.600 --> 00:00:34.970
Once the apt‑get update finishes we'll simply install BloodHound with the

00:00:34.980 --> 00:00:38.850
apt‑get install command and specify the BloodHound package.

00:00:43.040 --> 00:00:47.150
As you can see, it installed Neo4j and then it installed BloodHound.

00:00:47.580 --> 00:00:53.150
So once the installation is complete, I'll open in new terminal window,

00:00:53.840 --> 00:01:00.010
juggling to move right here, and I am going to manually start Neo4j,

00:01:00.020 --> 00:01:02.280
which is the graph database that BloodHound uses.

00:01:03.600 --> 00:01:05.750
The command for this is neo4j console.

00:01:06.240 --> 00:01:08.850
We don't need to run it as a daemon or anything like that,

00:01:08.850 --> 00:01:11.570
because we'll be running it at the same time as we're using BloodHound.

00:01:13.480 --> 00:01:17.290
You'll see that the database will start and a remote

00:01:17.290 --> 00:01:18.980
interface will be made available.

00:01:19.740 --> 00:01:26.060
I highly recommend copying that link, visiting it in a web

00:01:26.060 --> 00:01:28.750
browser, to change the default password.

00:01:29.140 --> 00:01:35.170
Neo4j by default is not supposed to listen on the network, but you never know.

00:01:35.170 --> 00:01:40.250
I don't like having any network service running with a default password. So you

00:01:40.250 --> 00:01:43.750
can log into this with the user name and the password neo4j.

00:01:45.640 --> 00:01:48.970
The first time you log in, it will actually force you to change the password.

00:01:54.570 --> 00:01:55.150
There it is,

00:01:55.160 --> 00:01:59.610
so I'll minimize my web browser and I'll go back to my first terminal window.

00:02:00.340 --> 00:02:07.150
From here I am simply going to run BloodHound. You can authenticate to

00:02:07.150 --> 00:02:09.370
BloodHound with the password you just configured.

00:02:11.830 --> 00:02:12.470
As you can see,

00:02:12.470 --> 00:02:16.680
it's connecting to localhost on port 7687 which is

00:02:16.680 --> 00:02:18.500
the Neo4j database we just started.

00:02:21.940 --> 00:02:24.200
And there it is, we're logged into BloodHound,

00:02:25.040 --> 00:02:28.620
and if we click this right here, we'll see that the database is empty.

00:02:30.140 --> 00:02:35.160
A pretty important step to do first is to enable Dark Mode because everyone

00:02:35.160 --> 00:02:38.350
knows you can't be a hacker unless you're using dark mode.

00:02:38.880 --> 00:02:39.510
There it is.

00:02:39.520 --> 00:02:42.340
BloodHound is completely configured and ready to go,

00:02:42.500 --> 00:02:46.450
so what we need to do next is gather some data we can import into it.