mirror of https://github.com/SHOGGOTH-SECTOR/sica-fondt.git synced 2026-08-01 00:23:15 +00:00

Consolidate 22 sibling repos into layered organism structure

Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):

- brain/        LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
                dispatch, A51 channels, and the OSINT cluster
- knowledge/    LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
                MITRE ATT&CK data
- reference/    defensive threat-reference (C3, shhbruh doc) + AdaYaml parser

License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.

Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.

https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c

2026-06-10 06:53:01 +00:00

1.8 KiB

Raw Blame History

BloodHound CE Reconnaissance — API Reference

Libraries

Library	Install	Purpose
neo4j	`pip install neo4j`	Neo4j graph database driver for Cypher queries
bloodhound	`pip install bloodhound`	Python ingestor for AD data collection
requests	`pip install requests`	BloodHound CE REST API client

Key neo4j Driver Methods

Method	Description
`GraphDatabase.driver(uri, auth=(user, pass))`	Connect to Neo4j
`driver.session()`	Open a session for queries
`session.run(cypher, **params)`	Execute Cypher query
`driver.close()`	Close driver connection

Critical Cypher Queries

Query Purpose	Cypher Pattern
Path to DA	`MATCH p=shortestPath((u:User)-[*1..]->(g:Group {name:"DOMAIN ADMINS@..."}))`
Kerberoastable	`MATCH (u:User) WHERE u.hasspn = true AND u.enabled = true`
Unconstrained Delegation	`MATCH (c:Computer) WHERE c.unconstraineddelegation = true`
AS-REP Roastable	`MATCH (u:User) WHERE u.dontreqpreauth = true`
DCSync rights	`MATCH p=(u)-[:GetChanges

BloodHound Python Ingestor

bloodhound-python -d domain.local -u user -p pass -ns DC_IP -c all --zip

Collection methods: all, group, localadmin, session, trusts, objectprops, acl

MITRE ATT&CK Mapping

Technique	ID
Account Discovery	T1087
Permission Groups Discovery	T1069
Domain Trust Discovery	T1482

1.8 KiB Raw Blame History