AnsibleHound is a BloodHound OpenGraph collector for Ansible WorX and Ansible Tower. The collector is designed to map the structure and permission of your organization into a navigable attack‑path graph.

Developped by @Ramoreik and @s_lck.

To obtain a valid token for Ansible WorX or Ansible Tower, you can navigate to the User Details of your current user.

Then the tokens tab.

Finally, create a token and give it Read permissions.

go build . -o build/collector

You can run the collector by providing it a target and a token. It will enumerate what it can give the user's access.

./collector -u '<ansible-url>' -t '<token>'

# Example
./collector -u 'http://localhost:8080/' -t '56KOmh...'

Note : If you have multiple instances of Ansible you need to run the collector against each of them

A script is provided to import the icon for the custom nodes used by AnsibleHound. You have to provide it the bloodhound-url and jwt-token.

python3 ./scripts/import-icons.py <bloodhound-url> <jwt-token>

# Example
python3 ./scripts/import-icons.py 'http://localhost:8080' 'ey[...]'

If you don't have any Ansible WorX or Tower environment, you can just drop ./samples/example.json on BHCE to enjoy the graph.

Nodes correspond to each object type.

Note : This is a work in progress

All the edges are prefixed by AT to make it distinct from other collectors edges.

Note : This is a work in progress

                    GNU GENERAL PUBLIC LICENSE
                       Version 3, 29 June 2007

 Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
 Everyone is permitted to copy and distribute verbatim copies
 of this license document, but changing it is not allowed.