On GitHub, SpecterOps/SharpHound has picked up 1.3k stars, C#. C# Data Collector for BloodHound
Snapshot summary built from the project's own GitHub metadata — there's no written TopGit review yet. The page will update automatically when a full review is published.
WHY NO REVIEW YET
TopGit writes full reviews for the most-starred, most-requested repositories. This page is a snapshot until then — see the READ ME tab for the original README in full.
The latest build of SharpHound will always be found here.
To determine the SharpHound version compatible with a deployed BloodHound CE instance, login to BloodHound CE's web UI and click on ⚙️ (Settings) → Download Collectors. Then, click either the "Download SharpHound" button in the user interface or use the displayed SharpHound version to download the appropriate release binary. Alternatively, compile a SharpHound binary from the corresponding release commit.
Documentation
Please refer to the SharpHound section, part of the BloodHound Community Edition documentation.
Compilation Instructions
To build this project, using a .NET SDK run the following:
dotnet restore
dotnet build
By default, the project builds against the next prerelease -dev version of the
SharpHoundCommon Library
(tracking the v4 branch).
If you wish to build against a local copy of the library, ensure the _CommonLibPath and _RPCPath properties point to the correct DLLs, and run dotnet build -p:CommonSource=Local.
If CommonLibsVersion already contains a prerelease tag (e.g. 4.6.0-rc1),
that exact version is used as-is for both Stable and Dev sources.
CommonSource (default: Dev)
Package resolved
Dev
Prerelease (e.g. 4.6.0-rc1) or next patch -dev* (e.g. 4.6.1-dev*)
Stable
Current CommonLibsVersion (e.g. 4.6.0)
Local
Local SharpHoundCommon DLLs
dotnet build # Dev (default)
dotnet build -p:CommonSource=Stable
dotnet build -p:CommonSource=Local
dotnet build --tl:off # To view CommonLib resolution logs
Requirements
SharpHound is designed targeting .Net 4.7.2. SharpHound must be run from the context of a domain user, either directly through a logon or through another method such as RUNAS.
CLI Arguments
The listing below details the CLI arguments SharpHound supports. Additional details about these options can be found in the BloodHound CE Collection documentation.
-c, --collectionmethods (Default: Default) Collection Methods: Container, Group, LocalGroup, GPOLocalGroup,
Session, LoggedOn, ObjectProps, ACL, ComputerOnly, Trusts, Default, RDP, DCOM, DCOnly, UserRights,
CARegistry, DCRegistry, CertServices, WebClientService, NTLMRegistry,SMBInfo,LdapServices
-d, --domain Specify domain to enumerate
-s, --searchforest (Default: false) Search all available domains in the forest
--stealth Stealth Collection (Prefer DCOnly whenever possible!)
-f Add an LDAP filter to the pregenerated filter.
--distinguishedname Base DistinguishedName to start the LDAP search at
--computerfile Path to file containing computer names to enumerate
--outputdirectory (Default: .) Directory to output file too
--outputprefix String to prepend to output file names
--cachename Filename for cache (Defaults to a machine specific identifier)
--memcache Keep cache in memory and don't write to disk
--rebuildcache (Default: false) Rebuild cache and remove all entries
--randomfilenames (Default: false) Use random filenames for output
--zipfilename Filename for the zip
--nozip (Default: false) Don't zip files
--trackcomputercalls (Default: false) Adds a CSV tracking requests to computers
--zippassword Password protects the zip with the specified password
--prettyprint (Default: false) Pretty print JSON
--ldapusername Username for LDAP
--ldappassword Password for LDAP
--domaincontroller Override domain controller to pull LDAP from. This option can result in data loss
--ldapport (Default: 0) Override port for LDAP
--secureldap (Default: false) Connect to LDAP SSL instead of regular LDAP
--disablecertverification (Default: false) Disable certificate verification for secure LDAP
--disablesigning (Default: false) Disables Kerberos Signing/Sealing
--skipportcheck (Default: false) Skip checking if 445 is open
--portchecktimeout (Default: 500) Timeout for port checks in milliseconds
--skippasswordcheck (Default: false) Skip PwdLastSet age check when checking computers
--excludedcs (Default: false) Exclude domain controllers from session/localgroup enumeration (mostly for
ATA/ATP)
--throttle Add a delay after computer requests in milliseconds
--jitter Add jitter to throttle (percent)
--threads (Default: 50) Number of threads to run enumeration with
--skipregistryloggedon Skip registry session enumeration
--overrideusername Override the username to filter for NetSessionEnum
--realdnsname Override DNS suffix for API calls
--collectallproperties Collect all LDAP properties from objects
-l, --Loop Loop computer collection
--loopduration Loop duration (hh:mm:ss - 05:00:00 is 5 hours, default: 2 hrs)
--loopinterval Add delay between loops (hh:mm:ss - 00:03:00 is 3 minute)
--statusinterval (Default: 30000) Interval in which to display status in milliseconds
--localadminsessionenum Specify if you want to use a dedicated LOCAL user for session enumeration
--localadminusername Specify the username of the localadmin for session enumeration
--localadminpassword Specify the password of the localadmin for session enumeration
-v (Default: 2) Enable verbose output. Lower is more verbose
--help Display this help screen.
--version Display version information.
How active is development on SpecterOps/SharpHound?
The most recent commit recorded on SpecterOps/SharpHound was 7 days ago, based on the GitHub push timestamp. The repository has 262 forks — one of the better signals of community interest.
How many stars does SpecterOps/SharpHound have?
SpecterOps/SharpHound has 1.3k GitHub stars — refresh the page for the live number, or check github.com/SpecterOps/SharpHound. TopGit mirrors GitHub's count but does not claim minute-by-minute accuracy.
Is SpecterOps/SharpHound open source?
Yes — SpecterOps/SharpHound ships under the GPL-3.0 license, which makes its source code freely readable (and, depending on license terms, forkable and reusable). Source: github.com/SpecterOps/SharpHound.
What is SpecterOps/SharpHound?
SpecterOps/SharpHound (SpecterOps/SharpHound) is a C# project on GitHub. From the project's own README: C# Data Collector for BloodHound
What language is SpecterOps/SharpHound written in?
SpecterOps/SharpHound is written primarily in C#. GitHub's language field is based on the largest share of bytes in the default branch.
What license does SpecterOps/SharpHound use?
SpecterOps/SharpHound is released under the GPL-3.0 license. Always verify the LICENSE file directly on GitHub for the authoritative terms — license strings can be edited out of sync with a project's actual stance.
Where do I read more about SpecterOps/SharpHound?
This TopGit page is a snapshot — the READ ME tab shows the project's own README content (links stripped, images preserved). The GitHub repository at github.com/SpecterOps/SharpHound is the definitive source.
Read full README in the tab above.
Curious whether SharpHound is right for you?
Let ChatGPT, Claude, or Perplexity look into it — click below and see what AI actually says about SharpHound.
/SharpHound