Skip to main content
SCCMHunter is a Python-based tool that requires proper configuration for SCCM infrastructure assessment. This guide covers installation, dependencies, and initial setup.
SCCMHunter requires Python 3.6+ and various dependencies for LDAP, SMB, and HTTP functionality.

Prerequisites

System Requirements

  • Operating System: Linux (preferred), Windows, or macOS
  • Python Version: Python 3.6 or higher
  • Network Access: Connectivity to target Active Directory environment
  • Credentials: Valid domain user account (minimum privileges)

Installation Methods

git clone https://github.com/garrettfoster13/sccmhunter.git
cd sccmhunter

Method 2: Direct Download

wget https://github.com/garrettfoster13/sccmhunter/archive/refs/heads/main.zip
unzip main.zip
cd sccmhunter-main

Dependencies

SCCMHunter relies on several Python libraries for its functionality:
  • impacket: For SMB, LDAP, and authentication protocols
  • ldap3: Enhanced LDAP operations and queries
  • requests: HTTP client enrollment and web service interactions
  • colorama: Terminal output formatting and colors
  • click: Command-line interface framework
  • pyopenssl: For certificate handling in HTTP modules
  • cryptography: Enhanced cryptographic operations
  • neo4j: For data export to BloodHound/Neo4j (if using —neo4j flag)

Manual Dependency Installation

If you encounter issues with requirements.txt:
pip3 install impacket ldap3 requests colorama click

Configuration

Environment Setup

Never hardcode credentials in scripts. Use environment variables or secure credential management.
export SCCM_USERNAME="domain\\username"
export SCCM_PASSWORD="password"
export SCCM_DOMAIN="contoso.com"
export SCCM_DC="dc01.contoso.com"

Kerberos Configuration

For Kerberos authentication, ensure proper krb5.conf setup:
kinit username@DOMAIN.COM

Verification

Basic Functionality Test

python3 sccmhunter.py --help

Connectivity Test

python3 sccmhunter.py find -d contoso.com -dc-ip 192.168.1.10 -u testuser -p password

Common Installation Issues

Solution: Install impacket properly
pip3 install impacket
# or for development version:
git clone https://github.com/SecureAuthCorp/impacket.git
cd impacket
pip3 install .
Solution: Use virtual environment or user installation
# Create virtual environment
python3 -m venv sccmhunter-env
source sccmhunter-env/bin/activate
pip3 install -r requirements.txt

# Or install for user only
pip3 install --user -r requirements.txt
Solution: Disable certificate verification for testing
export PYTHONHTTPSVERIFY=0
# Or use --no-ssl-verify flag when available

Performance Optimization

Optimization Tips

  • Use LDAPS: Enable LDAPS with -ldaps for encrypted communication
  • Targeted Scans: Use specific IP ranges rather than full domain scans
  • Parallel Processing: Consider running multiple instances for large environments
  • Network Tuning: Adjust timeouts for slow network conditions

Next Steps

Quick Start Guide

Begin your first SCCM assessment with a guided walkthrough

LDAP Enumeration

Start discovering SCCM infrastructure with the find module

SMB Profiling

Profile identified targets for attack surface analysis

Troubleshooting

Resolve common installation and configuration issues

Support and Resources

Getting Help

  • GitHub Issues: Report bugs and feature requests
  • Documentation: This documentation covers all modules and use cases
  • Community: Follow @garrfoster for updates
  • Lab Environment: Test in a controlled lab before production assessments