bloodhound.py -d CORP.LOCAL -u Administrator -p 'P@ssw0rd' --disable-jsonl -ns 10.10.10.1 The bloodbornepkg update is the most significant evolution of the Python BloodHound collector since its inception. By embracing JSONL, asynchronous LDAP, and native roasting, it bridges the gap between rapid Python prototyping and production-scale C# tooling.
Date: October 26, 2023 (Adjusted for context of a major tooling update) Reading Time: 8 minutes
After updating, always test with --help to review new flags like --disable-jsonl (reverts to old format) and --session-timeout (adjusts the new async session collector).
Recently, the maintainers pushed a significant update to the bloodbornepkg . If you have run pip install --upgrade bloodhound recently, you have likely noticed changes in performance, output format, and session handling.
| Metric | v0.7.2 (Legacy) | v1.0.0 (Updated) | Improvement | | ----------------------- | --------------- | ---------------- | ----------- | | Time to enum (LDAP) | 14m 22s | 8m 01s | | | Memory peak (RSS) | 1.2 GB | 340 MB | 72% less | | JSON to JSONL conversion| N/A (monolithic)| 2.1 GB/sec write | Streaming | | Session collection | 38% timeout | 2% timeout | 95% reliability |