Installation and Setup

SCCMHunter is a Python-based tool that requires proper configuration for SCCM infrastructure assessment. This guide covers installation, dependencies, and initial setup.

SCCMHunter requires Python 3.6+ and various dependencies for LDAP, SMB, and HTTP functionality.

Prerequisites

System Requirements

Operating System: Linux (preferred), Windows, or macOS
Python Version: Python 3.6 or higher
Network Access: Connectivity to target Active Directory environment
Credentials: Valid domain user account (minimum privileges)

Installation Methods

Method 1: Git Clone (Recommended)

git clone https://github.com/garrettfoster13/sccmhunter.git
cd sccmhunter

pip3 install -r requirements.txt

python3 sccmhunter.py --help

Method 2: Direct Download

wget https://github.com/garrettfoster13/sccmhunter/archive/refs/heads/main.zip
unzip main.zip
cd sccmhunter-main

pip3 install -r requirements.txt

Dependencies

SCCMHunter relies on several Python libraries for its functionality:

Core Dependencies

impacket: For SMB, LDAP, and authentication protocols
ldap3: Enhanced LDAP operations and queries
requests: HTTP client enrollment and web service interactions
colorama: Terminal output formatting and colors
click: Command-line interface framework

Optional Dependencies

pyopenssl: For certificate handling in HTTP modules
cryptography: Enhanced cryptographic operations
neo4j: For data export to BloodHound/Neo4j (if using —neo4j flag)

Manual Dependency Installation

If you encounter issues with requirements.txt:

pip3 install impacket ldap3 requests colorama click

pip3 install pyopenssl cryptography neo4j

Configuration

Environment Setup

Never hardcode credentials in scripts. Use environment variables or secure credential management.

export SCCM_USERNAME="domain\\username"
export SCCM_PASSWORD="password"
export SCCM_DOMAIN="contoso.com"
export SCCM_DC="dc01.contoso.com"

# Create ~/.sccmhunter/config
[default]
username = domain\\username
domain = contoso.com
dc-ip = 192.168.1.10

Kerberos Configuration

For Kerberos authentication, ensure proper krb5.conf setup:

kinit username@DOMAIN.COM

klist

python3 sccmhunter.py find -d domain.com -dc-ip 192.168.1.10 -k --no-pass

Verification

Basic Functionality Test

python3 sccmhunter.py --help

python3 sccmhunter.py find --help
python3 sccmhunter.py smb --help
python3 sccmhunter.py http --help

Connectivity Test

python3 sccmhunter.py find -d contoso.com -dc-ip 192.168.1.10 -u testuser -p password

[+] Starting LDAP enumeration...
[+] Connecting to domain controller: 192.168.1.10
[+] Authentication successful
[+] Beginning SCCM infrastructure discovery...

Common Installation Issues

ImportError: No module named 'impacket'

Solution: Install impacket properly

pip3 install impacket
# or for development version:
git clone https://github.com/SecureAuthCorp/impacket.git
cd impacket
pip3 install .

Permission Denied Errors

Solution: Use virtual environment or user installation

# Create virtual environment
python3 -m venv sccmhunter-env
source sccmhunter-env/bin/activate
pip3 install -r requirements.txt

# Or install for user only
pip3 install --user -r requirements.txt

SSL/TLS Certificate Errors

Solution: Disable certificate verification for testing

export PYTHONHTTPSVERIFY=0
# Or use --no-ssl-verify flag when available

Performance Optimization

Optimization Tips

Use LDAPS: Enable LDAPS with -ldaps for encrypted communication
Targeted Scans: Use specific IP ranges rather than full domain scans
Parallel Processing: Consider running multiple instances for large environments
Network Tuning: Adjust timeouts for slow network conditions

Next Steps

Quick Start Guide

Begin your first SCCM assessment with a guided walkthrough

LDAP Enumeration

Start discovering SCCM infrastructure with the find module

SMB Profiling

Profile identified targets for attack surface analysis

Troubleshooting

Resolve common installation and configuration issues

Support and Resources

Getting Help

GitHub Issues: Report bugs and feature requests
Documentation: This documentation covers all modules and use cases
Community: Follow @garrfoster for updates
Lab Environment: Test in a controlled lab before production assessments

Getting Started

Enumeration

Exploitation

Post-Exploitation

Prerequisites

System Requirements

Installation Methods

Method 1: Git Clone (Recommended)

Method 2: Direct Download

Dependencies

Manual Dependency Installation

Configuration

Environment Setup

Kerberos Configuration

Verification

Basic Functionality Test

Connectivity Test

Common Installation Issues

Performance Optimization

Optimization Tips

Next Steps

Quick Start Guide

LDAP Enumeration

SMB Profiling

Troubleshooting

Support and Resources

Getting Help

​Prerequisites

System Requirements

​Installation Methods

​Method 1: Git Clone (Recommended)

​Method 2: Direct Download

​Dependencies

​Manual Dependency Installation

​Configuration

​Environment Setup

​Kerberos Configuration

​Verification

​Basic Functionality Test

​Connectivity Test

​Common Installation Issues

​Performance Optimization

Optimization Tips

​Next Steps

Quick Start Guide

LDAP Enumeration

SMB Profiling

Troubleshooting

​Support and Resources

Getting Help

Prerequisites

Installation Methods

Method 1: Git Clone (Recommended)

Method 2: Direct Download

Dependencies

Manual Dependency Installation

Configuration

Environment Setup

Kerberos Configuration

Verification

Basic Functionality Test

Connectivity Test

Common Installation Issues

Performance Optimization

Next Steps

Support and Resources