specterops/bloodhound-python-sdk

BloodHound is a tool that security professionals use to map out relationships and permissions in computer networks, things like who has access to what, which users are administrators, and how an attacker might move through a network once inside. The BloodHound Python SDK gives developers a ready-made way to connect to BloodHound's API from Python code, so they can pull data, run queries, and build automation around it without having to write all the connection and authentication plumbing themselves. To use it, you install the library with a standard Python package manager, then provide credentials, specifically an API token ID and key generated from BloodHound. The library handles the authentication handshake for you. Once connected, you call specific functions that correspond to BloodHound's API endpoints, and the library returns organized data objects that are easy to work with in Python. The main audience is security engineers, penetration testers, or anyone building tools that need to programmatically interact with BloodHound data. For example, a security team might use this SDK to automatically pull a nightly snapshot of who has domain administrator privileges, then trigger alerts if something changed. A pentester might use it to query attack paths as part of an automated assessment pipeline. The library supports both synchronous and asynchronous code, meaning it works in traditional scripts as well as modern applications that handle many tasks concurrently. Each API endpoint comes in four flavors: blocking or async, and each in a simple or detailed version. The simple versions return parsed data directly, the detailed versions give you full control over the HTTP response. The project is built with Poetry, a Python dependency manager, and the README notes that the underlying HTTP client can be customized for advanced use cases, though it doesn't go into much detail on those specifics.