Andy Robbins

Co-founder of SpecterOps. Co-creator of BloodHound.

[Andy Robbins @_wald0]

I'm on Bluesky here: https://t.co/Ewbf2eLsGU

[SpecterOps @SpecterOps]

BloodHound is 10 🎉

To celebrate, creators @_wald0, @CptJesus & @harmj0y joined for a special two-part #KnowYourAdversary.

They reminisce on the first attack graphs and look ahead to what’s next for BloodHound.

1️⃣: https://t.co/eLDBpNRRt7
2️⃣: https://t.co/aAh6wphQzu

[Will Schroeder @harmj0y]

I can't believe it's already been 10 years, what an insane ride! At this point I'm sure we'll all have BloodHound etched on our tombstones (maybe @_wald0 will have 'Thought in graphs...' 😂) - it truly was an honor working on this project with these two <3

[Tal Be'ery @TalBeerySec]

BloodHound turns 10 🎉
Congrats @_wald0, @CptJesus, @harmj0y
Original pic 👇 taken on @BlackHatEvents #BHUSA arsenal.

[Chris Thompson @_Mayyhem]

My SCCM BloodHound OpenGraph collector, ConfigManBearPig, is finally ready to share! It can enumerate all of the relay TAKEOVERs and a few CRED and ELEVATE techniques from Misconfiguration Manager with just a domain account. Let me know what you find! https://t.co/ykgpBgz9iN

[SpecterOps @SpecterOps]

Stack spoofing isn’t dead.

Hear from @klezvirus at #BHEU on how modern detection still breaks, and unveils the first CET-compliant stack spoofing framework.

Learn more ➡️ https://t.co/3ffbujgNPE

[Garrett @unsigned_sh0rt]

See you all next week...excited to present with @breakfix at #BHEU! 💣

[SpecterOps @SpecterOps]

SCOM monitors critical systems, but insecure defaults make it a powerful attack vector.

At #BHEU, @unsigned_sh0rt & @breakfix show how to abuse SCOM for credential theft, lateral movement, and domain escalation, plus how to defend it. https://t.co/bxW5PYyhyl

[Cody Thomas @its_a_feature_]

Just in time for the holidays, I wanted to share something that a lot of people have asked for: https://t.co/DfXyf2TTBp
Short videos about Mythic development and customizations. This is just the start - I'll release a survey soon that'll get feedback for the next batch :)

[SpecterOps @SpecterOps]

Credential Guard was supposed to end credential dumping. It didn't.

@bytewreck just dropped a new blog post detailing techniques for extracting credentials on fully patched Windows 11 & Server 2025 with modern protections enabled.

Read for more ⤵️ https://t.co/mYPHg1mTKj

[Jared Atkinson @jaredcatkinson]

In this post @_wald0 introduces PingOneHound, a BloodHound OpenGraph extension that allows users to visualize, audit, and remediate attack paths in their PingOne environment. The blog post also serves as an introduction to the PingOne architecture.
https://t.co/BjD5DPiih1

[SpecterOps @SpecterOps]

BloodHound isn't just for Active Directory anymore. 🤯

@SadProcessor dives into the BloodHound OpenGraph functionality & demonstrates the new PowerShell cmdlets added to the BloodHound Operator module to work with the OpenGraph feature. https://t.co/uGDv3PNFTM

[SpecterOps @SpecterOps]

ICYMI: BloodHound OpenGraph, introduced with BloodHound v8.0, allows you to map attack paths across your entire tech stack. @JustinKohler10 & @_wald0 recently joined @_JohnHammond to discuss the new feature and share a demo.

Watch the conversation 👉 https://t.co/Hq7bs6HAIN

[Andy Robbins @_wald0]

@techspence @SwiftOnSecurity NAT

[Andy Robbins @_wald0]

🚨 New #BloodHound shirt alert 🚨

✅ - Unisex and ladies sizes available
✅ - Cool design :)
✅ - ALL profits go to charity:

Hope for HIE, which supports families suffering the effects of hypoxic ischemic encephalopathy

Get your shirt here: https://t.co/WkiQ8X59Vp

[SpecterOps @SpecterOps]

We are back with our BloodHound t-shirt fundraiser! 🙌

Grab your BloodHound 8.0 shirt today. All funds raised will go directly to @HopeforHIE, the global voice for families affected by Hypoxic Ischemic Encephalopathy.

👕: https://t.co/qG7e34U7mh

[Hope Walker @Icemoonhsv]

Check out my new blog on nested app authentication and brokered authentication.

[MOR DAVID @m0rd4vid]

Dear fellow pentesters & red teamers,
How often do you run into a vCenter in your client’s environment? 🖥️
I just built one for vCenter - meet vCenterHound 🐾😉
This is just the beginning… more collectors and surprises are on the way.
#Pentesting #RedTeam #BloodHound #vCenter

[Chris Thompson @_Mayyhem]

This post about MSSQLHound, a PowerShell collector that adds 7 new nodes and 37 new edges to BloodHound, details my experience and lessons learned designing and implementing the tool using OpenGraph and provides examples of how to research and discover MSSQL attack paths.

[SpecterOps @SpecterOps]

MSSQL support just landed in BloodHound! You can now map out how attackers might use SQL servers to move laterally. This is incredibly useful in hybrid and legacy heavy environments. Let us know what you find.

Learn more ➡️ https://t.co/30pNgVHvBj

[SpecterOps @SpecterOps]

MSSQLHound leverages BloodHound's OpenGraph to visualize MSSQL attack paths with 7 new nodes & 37 new edges, all without touching the SharpHound & BloodHound codebases.

@_Mayyhem unpacks this new feature in his blog post. 👇 https://t.co/ZvZt45UrOa