SpecterOps / SpecterOps/BloodHound
Feature: Add container enumeration to API
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 3.4k
- Forks
- 376
- Avg merge
- 2d 7h
- Merged PRs (30d)
- 97
Description
Feature Description
Add the ability to enumerate containers in a domain through the API.
Are you intending to implement this feature?
No
Current Behavior
It is currently possible to query a container's properties and controllers through the /api/v2/containers path. It is not possible to enumerate containers in a domain or otherwise from the API.
Desired Behavior
An API endpoint analogous to /api/v2/domain/<ID>/ous but for containers.
Use Case
Active directory places many objects in containers such as "Builtin", "Users", "Computers" and "Managed Service Accounts" by default. There is currently no way to programatically find who has control over these objects through the BHCE API as they cannot be found.
Implementation Suggestions
Add the /api/v2/domain/<ID>/containers endpoint.
Additional Information
N/A
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing the existing /api/v2/domain//ous endpoint and the /api/v2/containers API path to understand their routing, response shape, and tests. The work is done when /api/v2/domain//containers enumerates containers in the requested domain and supports the use case described for locating their controlled objects.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- api, backend
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 42/100