Alternatives to SharpHound
A C# collector that gathers Active Directory data for attack path analysis in BloodHound. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
SharpHound
A C# collector that gathers Active Directory data for attack path analysis in BloodHound.
Replacements
Listings that take over the same core job as SharpHound.
ADRecon
A PowerShell script that gathers Active Directory information and builds an Excel report of the environment.
ADRecon gathers Active Directory information into an Excel report from a single PowerShell script, useful for documentation but not producing data for BloodHound attack path analysis.
Also worth comparing
These listings name SharpHound as their own alternative, so the relationship runs both ways.
AzureHound
A command-line collector that exports Microsoft Azure and Entra ID data for analysis in BloodHound.
SharpHound is the C# collector gathering on-premises Active Directory data for BloodHound, where AzureHound covers Azure and Entra ID.
Purple Knight
A free Windows tool that assesses Active Directory, Entra ID and Okta for security weaknesses.
SharpHound is an open source collector that maps Active Directory attack paths, but it is only useful together with a BloodHound instance.
Similar software
Related functionality, not a direct replacement.
BloodHound Community Edition
Maps attack paths through Active Directory and Entra ID relationships.
PingCastle
Active Directory security assessment tool that scores risky configuration.
Certipy
Audit Active Directory Certificate Services configurations.
NetExec
Assess network services during authorized enterprise security tests.
