BloodHound

Cross-platform resources for BloodHound: curated HTB machines, PortSwigger labs and TryHackMe rooms with validated writeups and related skills.

This page aggregates cross-platform resources to practice BloodHound: retired Hack The Box machines, PortSwigger Web Security Academy labs and TryHackMe rooms, plus curated resources (HackTricks, PortSwigger, etc.) and related skills.

Coverage: 11 challenges across 2 platforms — 10 HackTheBox · 1 TryHackMe. 10 with a Spanish writeup, 10 with a video writeup.

Where to start

Ordered by actual difficulty. At the same level: isolated lab first, then the guided room, and the full machine last.

1. TryHackMe — Post-Exploitation Basics (Easy · ~45 min) · 🇬🇧
2. HackTheBox — Forest (Fácil) · 🇪🇸 🇬🇧 📹
3. HackTheBox — Sauna (Fácil) · 🇪🇸 🇬🇧 📹
4. HackTheBox — Intelligence (Medio) · 🇪🇸 🇬🇧 📹
5. HackTheBox — StreamIO (Medio) · 🇪🇸 🇬🇧 📹
6. HackTheBox — Blackfield (Difícil) · 🇪🇸 🇬🇧 📹

Curated resources

Source	Link
HackTricks	https://book.hacktricks.wiki/en/windows-hardening/active-directory-methodology/index.html
BloodHound docs	https://bloodhound.specterops.io/

HTB machines practicing BloodHound (10)

Machine	OS	Difficulty	Writeup
Blackfield	Windows	HARD	🇪🇸 🇬🇧 📹
Forest	Windows	EASY	🇪🇸 🇬🇧 📹
Intelligence	Windows	MEDIUM	🇪🇸 🇬🇧 📹
Mantis	Windows	HARD	🇪🇸 🇬🇧 📹
MultiMaster	Windows	INSANE	🇪🇸 🇬🇧 📹
Object	Windows	HARD	🇪🇸 🇬🇧 📹
Sauna	Windows	EASY	🇪🇸 🇬🇧 📹
Search	Windows	HARD	🇪🇸 🇬🇧 📹
Sizzle	Windows	INSANE	🇪🇸 🇬🇧 📹
StreamIO	Windows	MEDIUM	🇪🇸 🇬🇧 📹

TryHackMe rooms practicing BloodHound (1)

Room	Difficulty	Type	Access	Official
Post-Exploitation Basics	EASY	Walkthrough	🟢 Free	Open

Related skills

• /en/skills/active-directory
• /en/skills/kerberoasting
• /en/skills/dcsync

---

← Back to the full glossary

Last updated: 2026-08-13