# BloodHound: Active Directory Attack Path Mapping

> Learn to map and exploit hidden Active Directory relationships using BloodHound and SharpHound to find the shortest path to Domain Admin.

Canonical: https://codelivly.com/rooms/bloodhound-active-directory-attack-path-mapping
Last updated: 2026-07-24

| | |
|---|---|
| Level | Advanced |
| Category | Cybersecurity |
| Lessons | 5 |
| Estimated time | 30 min |
| XP | 200 |

A comprehensive, hands-on module covering Active Directory attack path mapping. Learn how to collect AD data using SharpHound, ingest it into the BloodHound GUI powered by Neo4j, analyze graph relationships (Edges and Nodes), and execute real-world privilege escalation attacks (like abusing WriteDacl or GenericAll) to compromise Domain Admins. Includes guided, interactive labs.

## Lessons

1. What is BloodHound & Why Attackers Use It (30 min)
2. Collecting Data with SharpHound (30 min)
3. Analyzing Attack Paths in the BloodHound GUI (30 min)
4. Identifying Privilege Escalation Routes to Domain Admin (30 min)
5. Guided Lab: Finding & Executing an Attack Path (30 min)

## Related

- [Learning path: Active Directory Attacks](https://codelivly.com/learning-paths/active-directory-attacks)
- [All rooms](https://codelivly.com/rooms)