Will Schroeder (harmj0y)
More info
- Alias
- harmj0y
- Known for
- PowerView, BloodHound, Rubeus
The red teamer who taught a generation of attackers to see Active Directory as a graph.
He wrote PowerView, the PowerShell tool for mapping users, groups and permissions in an Active Directory domain, and worked on the Veil-Framework. In 2016 he presented BloodHound at DEF CON with Andy Robbins and Rohan Vazarkar: permissions go into a graph database, and the shortest path to domain admin becomes a query instead of a week of manual digging.
Rubeus followed, a C# toolkit for Kerberos abuse such as kerberoasting and ticket manipulation. He co-founded SpecterOps. Defenders use BloodHound at least as much as attackers do, which is about the highest compliment an offensive tool can get.