Bloodhound

🚀 BloodHound-MCP

BloodHound-MCP integrates the Model Context Protocol (MCP) Server with BloodHound, enabling natural - language analysis of Active Directory security data.

🚀 Quick Start

BloodHound-MCP is a powerful integration that brings the capabilities of the Model Context Protocol (MCP) Server to BloodHound, the industry - standard tool for analyzing Active Directory security. This integration allows you to analyze BloodHound data using natural language, making complex Active Directory attack path analysis more accessible.

🥇 The First BloodHound AI Integration!
This is the first integration of BloodHound with artificial intelligence, originally announced here.

🔍 What is BloodHound-MCP?

BloodHound-MCP combines the following features:

• BloodHound: An industry - standard tool for visualizing and analyzing Active Directory attack paths.
• Model Context Protocol (MCP): An open protocol for creating custom AI tools, compatible with multiple AI models.
• Neo4j: The graph database used by BloodHound to store AD relationship data.

With over 75 dedicated tools based on the original BloodHound CE Cypher queries, BloodHound-MCP allows security professionals to:

• Query BloodHound data using natural language.
• Discover complex attack paths in the Active Directory environment.
• Evaluate Active Directory security more efficiently.
• Generate detailed security reports for stakeholders.

📱 Community

Join our Telegram channel for updates, tips, and discussions:

• Telegram: root_sec

🌟 Star History

✨ Features

• Natural Language Interface: Query BloodHound data using plain English.
• Comprehensive Analysis Categories:
  • Domain structure mapping.
  • Privilege escalation paths.
  • Kerberos security issues (Kerberoasting, AS - REP Roasting).
  • Certificate service vulnerabilities.
  • Active Directory hygiene assessment.
  • NTLM relay attack vectors.
  • Proxy abuse opportunities.
  • And more!

📦 Installation

Prerequisites

• BloodHound 4.x+ with data collected from the Active Directory environment.
• A Neo4j database loaded with BloodHound data.
• Python 3.8 or higher.
• MCP client.

Steps

1. Clone this repository:

   git clone https://github.com/your-username/MCP-BloodHound.git
   cd MCP-BloodHound
   

2. Install dependencies:

   pip install -r requirements.txt
   

3. Configure the MCP server:

   # Example configuration file
   {
     "server": {
       "port": 5000,
       "host": "localhost"
     },
     "db": {
       "type": "neo4j",
       "uri": "bolt://localhost:7687",
       "user": "neo4j",
       "password": "password"
     }
   } > config.json
   

4. Start the server:

   python server.py
   

💻 Usage Examples

Basic Usage

1. Start the MCP client:

   mcp-client
   

2. Send a query:

   # Example query
   {
     "action": "query",
     "params": {
       "query": "MATCH (n) RETURN n LIMIT 10"
     }
   }
   

📄 License

This project is protected under the MIT License.

For more information, please visit our documentation or contact the support team.