Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

"No data" only for one file in the ZIP #518

Closed
devl00p opened this issue Feb 17, 2022 · 14 comments
Closed

"No data" only for one file in the ZIP #518

devl00p opened this issue Feb 17, 2022 · 14 comments

Comments

@devl00p
Copy link

devl00p commented Feb 17, 2022

Using BloodHound 4.1.0 on Kali Linux 2022.1, when I import the ZIP files all JSON files are processed correctly except the users.json file that gives "No data" which is false (there is some data and the JSON is valid).

Ingestor: sharpound.exe, v 1.0.2
Binary was launched on a Windows 7 OS with .NET Framework 4.6.2

Attached file is the ZIP file (match a vulnerable-ad config)
20220217181624_BloodHound.zip

@scottctaylor12
Copy link

+1
I'm seeing the same error when running on a Win10 machine. Even though my users.json file is 173K, the upload in bloodhound states No Data in file ☹️

image

@emanuelduss
Copy link

I can confirm this.

On an updated Kali machine, import into BloodHound installed via apt does not work. When the version from the Releases is used, it works (both on Kali & on Windows).

@scottctaylor12
Copy link

@emanuelduss thank you! That fixed my problem 😃
For the Bloodhound team, this might be something to look into. Using the Bloodhound from the GitHub releases works fine. However, the Bloodhound in Kali's apt repo seems to have an issue ingesting the users.json file...

@rvazarkar
Copy link
Contributor

We don't maintain the apt repo, so its likely just very out of date

@emanuelduss
Copy link

@scottctaylor12 But you had the same problem on a Windows machine? Otherwise, I would agree that this is probably an issue with the Kali package.

@scottctaylor12
Copy link

Poor explanation on my part. Previously, I was saying that I ran SharpHound on a Win10 machine as opposed to devl00p who ran it on a "Windows 7 OS with .NET Framework 4.6.2". I am running the actual Bloodhound server on a Kali instance and used the Bloodhound from Kali's apt repo.

@anasbousselham
Copy link

I have the same problem.
SharpHound ver: 1.0.3
BloodHound ver: 4.1.0
My _users.json is not empty

{                                                                                                                                                                                                                                  
  "data": [                                                                                                                                                                                                                        
    {                                                                                                                                                                                                                              
      "AllowedToDelegate": [],                                                                                                                                                                                                     
      "PrimaryGroupSID": "S-1-5-21-537427935-490066102-1511301751-513",                                                                                                                                                            
      "HasSIDHistory": [],                                                                                                                                                                                                         
      "SPNTargets": [],                                                                                                                                                                                                            
      "Aces": [                                                                                                                                                                                                                    
        {                                                                                                                                                                                                                          
          "PrincipalSID": "S-1-5-21-537427935-490066102-1511301751-512",                                                                                                                                                           
          "PrincipalType": "Group",                                                                                                                                                                                                
          "RightName": "Owns",                                                                                                                                                                                                     
          "IsInherited": false                                                                                                                                                                                                     
        },                                                                                                                                                                                                                         
        {                                                                                                                                                                                                                          
          "PrincipalSID": "RESOURCED.LOCAL-S-1-5-32-544",                                                                                                                                                                          
          "PrincipalType": "Group",                                                                                                                                                                                                
          "RightName": "WriteDacl",                                                                                                                                                                                                
          "IsInherited": false                                                                                                                                                                                                     
        },                                                                                                                                                                                                                         
        {                                                                                                                                                                                                                          
          "PrincipalSID": "RESOURCED.LOCAL-S-1-5-32-544",                                                                                                                                                                          
          "PrincipalType": "Group",                                                                                                                                                                                                
          "RightName": "WriteOwner",                                                                                                                                                                                               
          "IsInherited": false                                                                                                                                                                                                     
        },                                                                                                                                                                                                                         
        {                                                                                                                                                                                                                          
          "PrincipalSID": "RESOURCED.LOCAL-S-1-5-32-544",                                                                                                                                                                          
          "PrincipalType": "Group",                                                                                                                                                                                                
          "RightName": "AllExtendedRights",                                                                                                                                                                                        
          "IsInherited": false                                                                                                                                                                                                     
        },                                                                                                                                                                                                                         
        {                                                                                                                                                                                                                          
          "PrincipalSID": "RESOURCED.LOCAL-S-1-5-32-544",                                                                                                                                                                          
          "PrincipalType": "Group",                                                                                                                                                                                                
          "RightName": "GenericWrite",                                                                                                                                                                                             
          "IsInherited": false                                                                                                                                                                                                     
        },                                                                                                                                                                                                                         
        {                                                                                                                                                                                                                          
          "PrincipalSID": "S-1-5-21-537427935-490066102-1511301751-512",                                                                                                                                                           
          "PrincipalType": "Group",                                                                                                                                                                                                
          "RightName": "WriteDacl",                                                                                                                                                                                                
          "IsInherited": false                                                                                                                                                                                                     
        },                                                                                                                                                                                                                         
        {                                                                                                                                                                                                                          
          "PrincipalSID": "S-1-5-21-537427935-490066102-1511301751-512",                                                                                                                                                           
          "PrincipalType": "Group",                                                                                                                                                                                                
          "RightName": "WriteOwner",                                                                                                                                                                                               
          "IsInherited": false                                                                                                                                                                                                     
        },                                                                                                                                                                                                                         
        {                                                                                                                                                                                                                          
          "PrincipalSID": "S-1-5-21-537427935-490066102-1511301751-512",                                                                                                                                                           
          "PrincipalType": "Group",                                                                                                                                                                                                
          "RightName": "AllExtendedRights",                                                                                                                                                                                        
          "IsInherited": false                                                                                                                                                                                                     
        },                                             

@swordfish0x0
Copy link

swordfish0x0 commented Apr 1, 2022

I'm seeing this as well bloodhound 4.10. latest Kali pull. Pulling the same version of BH from the releases page, fixes the problem for me. go figure...

@rvazarkar
Copy link
Contributor

I cant reproduce this at all, so I suspect something is wrong with the Kali build

@nest-edu
Copy link

nest-edu commented Apr 4, 2022

I have the same problem.
VM Kali v2022.1
SharpHound.exe v1.0.3
BloodHound v4.1.0

ErrorBLOODHOUND

@fiorenzi
Copy link

fiorenzi commented May 4, 2022

Same issue, same context. any workaround ?

@emanuelduss
Copy link

The Kali version still has this problem.

The workaround is to use the latest precompiled version: https://github.com/BloodHoundAD/BloodHound/releases/latest

@andyrobbins
Copy link
Contributor

Hi all,

We do not have any control over the Kali repositories and cannot support issues related to that product. Please do not pull BloodHound from the Kali repositories. Please only pull BloodHound directly from this repository. We can support issues related to the latest versions of BloodHound hosted here, we cannot support issues related to the Kali repositories being out of date.

Andy

@TH3CR4CK3R0
Copy link

image

This problem still exists with the latest version

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

10 participants