DPAT enhancements: CE compatibility, interactive reporting, and bug fixes

[exploit-development]

Summary

Ports the DPAT module to BloodHound Community Edition (Neo4j, 2.x collector
schema) and rebuilds the report as a self-contained interactive HTML file.
Adds password reuse and blank-hash analytics, privileged account exposure
scoring, and several collector compatibility fixes.

Live sample report: https://exploit-development.github.io/Max-BloodHound-CE/sample_report.html

What's new

Enhanced DPAT reporting

• Single-file HTML report with all CSS, JS, and icons embedded as base64, no external dependencies
• Summary dashboard with charts and privileged account exposure
• Password reuse detection across all shared hashes, not just cracked ones
• Blank password detection (flags empty NT hash 31d6cfe0d16ae931b73c59d7e0c089c0)
• Improved LM hash parsing in potfiles
• Group risk scoring weighted by cracked users x percentage, so large compromised groups are not buried under small 100% groups
• Group membership ranking to surface over-privileged accounts
• Interactive drill-down across stats, users, groups, and charts
• Per-user detail pages showing group membership, password info, and accounts sharing the same hash
• CSV export on every table
• Sanitise option to redact passwords and hashes for sharing

Sample data

• Bundled BloodHound JSON (three domains), NTDS, and potfile for testing the full report end to end

Bug fixes

• Fixed Builtin Administrators group detection broken by the new collector appending the domain name to the group
• Unsupported OS query no longer flags Windows 11 as end of life