Bloodhound 4.1 released, new edges added about bloodyad HOT 5 CLOSED

You can already exploit those edges manually using bloodyAD. You can write SPNs using the 'setAttribute' function.

I could however add AddSelf and later AddKeyCredentialLink in autobloody. I will let this issue opened to remember.
The problem for AddKeyCredentialLink as you experienced, is that you need a Windows 2016 functional level and a DC with a certificate for pkinit and Sharphound doesn't check those conditions.

from bloodyad.

Thanks. Could you write an example on how to write an SPN? Also, are you saying that "AddSelf" will not work using bloodyAD.py or that it already can be used using the "addObjectToGroup" function in bloodyAD.py?

from bloodyad.

I think something like this should work:
python bloodyAD.py -u john.doe -d bloody -p Password512! --host 192.168.10.2 setAttribute 'computer1$' servicePrincipalName ["HTTP/www.contoso.com","TERMSRV/FRONTRM.contoso.com"]
Be aware that it will not keep the old values so if you want to keep it use getObjectAttributes first and note the SPN value

from bloodyad.

Can I use a URL with this...appears to be a great tool

from bloodyad.

Could you be more explicit? I don't understand your question.

from bloodyad.