Sharphound

SharpHound Community Edition Flags - SpecterOpsSpecterOps

Basic usage

sharphound.exe --CollectionMethods <methods> --Domain <domain> --ExcludeDCs

• --CollectionMethods: specifies the kind of data to collect. Usually, this value will be All .Refer to the link above for the full list of available options

• --Domain: specifies which Active Directory domain to gather information from

• --ExcludeDCs: instruct SharpHound to not touch domain controllers. This can help in avoiding detection.

Using runas.exe

# spawn a cmd instance using a particular user's AD credentials
C:\> runas /netonly /user:<domain>\<username> cmd.exe

# from the spawned cmd 
$ ./sharphound.exe --domain xxxx ...