Recieving the following error when running autobloody

[hemvashi94]

[] Connection to Neo4j
[] No proxy detected
Traceback (most recent call last):
File "/usr/local/bin/autobloody", line 8, in
sys.exit(main())
^^^^^^
File "/usr/local/lib/python3.11/dist-packages/autobloody/main.py", line 82, in main
path_dict = pathgen(args)
^^^^^^^^^^^^^
File "/usr/local/lib/python3.11/dist-packages/autobloody/main.py", line 101, in pathgen
db = database.Database(args.dburi, args.dbuser, args.dbpassword)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/local/lib/python3.11/dist-packages/autobloody/database.py", line 9, in init
self._prepareDb()
File "/usr/local/lib/python3.11/dist-packages/autobloody/database.py", line 24, in _prepareDb
session.write_transaction(self._createGraph)
File "/usr/lib/python3/dist-packages/neo4j/_meta.py", line 81, in inner
return f(*args, **kwargs)
^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3/dist-packages/neo4j/_sync/work/session.py", line 763, in write_transaction
return self._run_transaction(
^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3/dist-packages/neo4j/_sync/work/session.py", line 491, in _run_transaction
result = transaction_function(tx, *args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/local/lib/python3.11/dist-packages/autobloody/database.py", line 75, in _createGraph
graph_exists = tx.run("RETURN gds.graph.exists('autobloody')").single()[0]
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3/dist-packages/neo4j/_sync/work/transaction.py", line 152, in run
result._tx_ready_run(query, parameters)
File "/usr/lib/python3/dist-packages/neo4j/_sync/work/result.py", line 115, in _tx_ready_run
self._run(query, parameters, None, None, None, None)
File "/usr/lib/python3/dist-packages/neo4j/_sync/work/result.py", line 161, in _run
self._attach()
File "/usr/lib/python3/dist-packages/neo4j/_sync/work/result.py", line 269, in _attach
self._connection.fetch_message()
File "/usr/lib/python3/dist-packages/neo4j/_sync/io/_common.py", line 180, in inner
func(*args, **kwargs)
File "/usr/lib/python3/dist-packages/neo4j/_sync/io/_bolt.py", line 659, in fetch_message
res = self._process_message(tag, fields)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3/dist-packages/neo4j/_sync/io/_bolt4.py", line 326, in _process_message
response.on_failure(summary_metadata or {})
File "/usr/lib/python3/dist-packages/neo4j/_sync/io/_common.py", line 247, in on_failure
raise Neo4jError.hydrate(**metadata)
neo4j.exceptions.CypherSyntaxError: {code: Neo.ClientError.Statement.SyntaxError} {message: Unknown function 'gds.graph.exists' (line 1, column 8 (offset: 7))
"RETURN gds.graph.exists(("autobloody")) AS gds.graph.exists('autobloody')"
^}

[DrorDvash]

same for me. any updates @CravateRouge?

[CravateRouge]

Hello DrorDvash, can you type this in your neo4j browser RETURN gds.version(); and give me the output?

[shahzaibak96]

@CravateRouge I am also having the same error as mentioned above. The output of the command you have asked for is here

[DrorDvash]

Hello DrorDvash, can you type this in your neo4j browser RETURN gds.version(); and give me the output?

like @shahzaibak96. so clearly we do not have GDS library installed on neo4j.

Unknown function 'gds.version' (line 1, column 8 (offset: 7))
"RETURN `gds`.`version`() AS `gds.version()`"
        ^

[CravateRouge]

It's because the GDS library is not installed in your neo4j setup. Here is the guide to install it, it is also mentioned in the dependencies of the README.

[CravateRouge]

As

@CravateRouge I am also having the same error as mentioned above. The output of the command you have asked for is here

As gds.version() does return an error it seems gds is not correctly installed. See https://neo4j.com/docs/graph-data-science/current/installation/#_verifying_the_installation and verify you have correctly made every steps.

[DrorDvash]

so GDS is installed, now i get a different error

≫ python3 autobloody.py -u adfs_svc -p 'XXXX' --host 192.168.20.10 -du 'neo4j' -dp 'bloodhound' -ds '[email protected]' -dt '0X0SECURITY.LOCAL' -d 0x0security.local
[*] Connection to Neo4j
[*] No proxy detected
Traceback (most recent call last):
  File "/root/Tools/autobloody/autobloody.py", line 6, in <module>
    main.main()
  File "/root/Tools/autobloody/autobloody/main.py", line 82, in main
    path_dict = pathgen(args)
                ^^^^^^^^^^^^^
  File "/root/Tools/autobloody/autobloody/main.py", line 103, in pathgen
    path = db.getPrivescPath(args.dbsource, args.dbtarget)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/root/Tools/autobloody/autobloody/database.py", line 13, in getPrivescPath
    relationships = session.read_transaction(
                    ^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/neo4j/_meta.py", line 81, in inner
    return f(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/neo4j/_sync/work/session.py", line 664, in read_transaction
    return self._run_transaction(
           ^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/neo4j/_sync/work/session.py", line 491, in _run_transaction
    result = transaction_function(tx, *args, **kwargs)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/root/Tools/autobloody/autobloody/database.py", line 95, in _findShortestPath
    return result.single()[0].relationships
           ~~~~~~~~~~~~~~~^^^
TypeError: 'NoneType' object is not subscriptable

[CravateRouge]

@DrorDvash it seems you have not path exploitable from [email protected] to 0X0SECURITY.LOCAL. Can you show me a screenshot of the path between those two edges if you think it's a path exploitable by autobloody?

[DrorDvash]

@DrorDvash it seems you have not path exploitable from [email protected] to 0X0SECURITY.LOCAL. Can you show me a screenshot of the path between those two edges if you think it's a path exploitable by autobloody?

I was just testing out the tool, currently loaded a small domain from HTB in my BH.
so you're saying there is no path exploitable between them -> maybe print a message about it.

I'll check it once again i have more data in my BH.
how the tool auto exploit a path? let's say i have writeDACL or something like that. what is going to happen?

[CravateRouge]

so you're saying there is no path exploitable between them -> maybe print a message about it.

So you're saying there is room for improvement -> maybe make a contribution if you want to have a better tool.

I'll check it once again i have more data in my BH.

autobloody is based on data ingested in BH. If you don't have the data in BH, autbloody will have no data to work on.

how the tool auto exploit a path? let's say i have writeDACL or something like that. what is going to happen?

autobloody will perform exploitations described in the "Abuse Info" of each edge documented in the bloodhound documentation. e.g. WriteDACL abuse info