Giter VIP home page Giter VIP logo

docker-bloodhound's Introduction

BloodHound Docker Ready to Use

BloodHound Docker image out of the box, with collectors and tons of custom queries. It creates a bh-data folder with the Ingestors, the data folder is also mounted as a volume, use this to drop your data and load it into the BloodHound GUI.

bloodhound

Run from Docker Hub

docker run -it \
  -p 7474:7474 \
  -e DISPLAY=unix$DISPLAY \
  -v /tmp/.X11-unix:/tmp/.X11-unix \
  --device=/dev/dri:/dev/dri \
  -v $(pwd)/bh-data:/data \
  --name bloodhound belane/bloodhound

Warning: You may need to run xhost +local:$(id -nu) to allow the local user to access DISPLAY.

Build Image

docker build . -t bloodhound

Optional Arguments

  • neo4j version
  • bloodhound version

docker build . -t bloodhound --build-arg neo4j=4.4.15 --build-arg bloodhound=4.2.0

Run

docker run -it \
  -p 7474:7474 \
  -e DISPLAY=unix$DISPLAY \
  -v /tmp/.X11-unix:/tmp/.X11-unix \
  --device=/dev/dri:/dev/dri \
  -v $(pwd)/bh-data:/data \
  --name bloodhound bloodhound

Start container

docker start bloodhound

Database Login

  • DB URL: bolt://localhost:7687
  • DB Username: neo4j
  • DB Password: blood

Documentation

Official BloodHound Documentation

docker-bloodhound's People

Contributors

beaujburroughs avatar belane avatar litobro avatar socksarethebest avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar

docker-bloodhound's Issues

Crash when uploading

When I click the upload arrow, bloodhound crashes. I get this output:
/opt/run.sh: line 6: 134 Trace/breakpoint trap (core dumped) /opt/BloodHound-linux-x64/BloodHound --no-sandbox 2> /dev/null

OpenJDK Docker Image Deprecated

The OpenJDK docker images are now deprecated as per the notice on Docker hubs.

I have rebuilt this image using debian:stable-slim and installed a JDK from apt-get repositories, and it seems to be an acceptable alternative.

Package names mismatch based on upstream image changes

debian:stable-slim has apparently changed since this was last updated, so it won't build. You get errors like 2.949 E: Package 'openjdk-11-jre' has no installation candidate. Changing the first line to:

FROM debian:11-slim

fixed it for me.

belane/bloodhound under unRAID

I just finished building out the belane/bloudhound image on my unRAID server. The container is all set as well as the image. It connects to neo4j w/o any issues. However it always ends with this error: "/opt/run.sh: line 6: 262 Segmentation fault /opt/BloodHound-linux-x64/BloodHound --no-sandbox 2> /dev/null"

Any ideas on how I can fix this?

v/r
Jon

Issues with DISPLAY and DEVICE

I have been trying to get this to run. I am wondering if this is a Windows issue as some of the commands I have never used before. I am trying to do this with a Docker-Compose, but get the same types of errors running the command line.

Here is my Docker-Compose:
`version: '3.3'

services:

bloodhound:
    image: belane/bloodhound
    environment: 
        - "DISPLAY=unix$DISPLAY"
    devices:
        - "/dev/dri:/dev/dri"
    volumes:
        - ./srv/data:/data
    ports:
        - "7474:7474"

`
The error I get is:

ERROR: for 6aaebf9c3a15_bloodhoundad_bloodhound_1 Cannot start service bloodhound: linux runtime spec devices: error gathering device information while adding custom device "/dev/dri": no such file or directory

If I comment out device it will start then immediately die. It does give this warning:

WARNING: The DISPLAY variable is not set. Defaulting to a blank string.

And this is the log after it starts:

Active database: graph.db Directories in use: home: /var/lib/neo4j config: /etc/neo4j logs: /var/log/neo4j plugins: /var/lib/neo4j/plugins import: /var/lib/neo4j/import data: /var/lib/neo4j/data certificates: /var/lib/neo4j/certificates run: /var/run/neo4j Starting Neo4j. Started neo4j (pid 62). It is available at http://localhost:7474/ There may be a short delay until the server is ready. See /var/log/neo4j/neo4j.log for current status. Starting ... First run takes some time *** Log in with bolt://127.0.0.1:7687 (neo4j:blood) ***

Any idea what I need to do to get this running?

/opt/run.sh: line 6: 161 Aborted (core dumped) /opt/BloodHound-linux-x64/BloodHound --no-sandbox 2> /dev/null

sudo docker run -it
-p 7474:7474
-e DISPLAY=unix$DISPLAY
-v /tmp/.X11-unix:/tmp/.X11-unix
--device=/dev/dri:/dev/dri
-v $(pwd)/bh-data:/data
--name bloodhound belane/bloodhound
Selecting JVM - Version:11.0.16+8, Name:OpenJDK 64-Bit Server VM, Vendor:Oracle Corporation
Changed password for user 'neo4j'. IMPORTANT: this change will only take effect if performed before the database is started for the first time.
Directories in use:
home: /var/lib/neo4j
config: /etc/neo4j
logs: /var/log/neo4j
plugins: /var/lib/neo4j/plugins
import: /var/lib/neo4j/import
data: /var/lib/neo4j/data
certificates: /var/lib/neo4j/certificates
licenses: /var/lib/neo4j/licenses
run: /var/lib/neo4j/run
Starting Neo4j.
Started neo4j (pid:94). It is available at http://localhost:7474
There may be a short delay until the server is ready.
*** Log in with bolt://127.0.0.1:7687 (neo4j:blood) ***
/opt/run.sh: line 6: 161 Aborted (core dumped) /opt/BloodHound-linux-x64/BloodHound --no-sandbox 2> /dev/null

Error when building

I am getting an error while trying to build the container:
E: Unable to locate package libva-glx1

Any idea how to fix this?

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.