skills.rest
hypnguyen1209
hypnguyen1209COMMUNITY
Explore all skills by this author →
Website𝕏@meulody_GitHub

active-directory-attack

Enumerate Active Directory components and map attack paths with BloodHound.

338|59|Updated May 19, 2026
Search Tags:#active-directory#lateral-movement#kerberoasting#dcsync#ntlm-relay#bloodhound#ad-attack
One-click install
npx skills add https://github.com/hypnguyen1209/offensive-claude --skill active-directory-attack
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: active-directory-attack
Source: https://github.com/hypnguyen1209/offensive-claude/tree/main/skills/active-directory-attack
Command: npx skills add https://github.com/hypnguyen1209/offensive-claude --skill active-directory-attack

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Active Directory environments commonly suffer from misconfigurations, shadow credentials, and privilege escalation paths that enable attackers to move laterally and compromise the domain. This skill provides structured enumeration and attack techniques (BloodHound, Kerberoasting, AS-REP roasting, Golden/Silver Ticket, NTLM relay, and DCSync) to identify and remediate these weaknesses in controlled engagements.

Core Features & Use Cases

  • BloodHound enumeration to reveal attack paths and privilege relationships.
  • Kerberos-based credential attacks (Kerberoasting, AS-REP roasting, Golden/Silver Tickets) and NTLM relay for lateral movement.
  • Lateral movement, privilege escalation, and persistence techniques with domain-wide impact.
  • Practical use in red-team engagements and defense-hardening exercises to validate AD security controls.

Quick Start

Enumerate AD posture and simulate Kerberos/NTLM techniques in a lab to uncover critical domain weaknesses.

Frequently Asked Questions about active-directory-attack

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map Active Directory attack paths using BloodHound?▼

Kerberoasting and AS-REP roasting target Active Directory Kerberos vulnerabilities to extract user credentials. This skill guides applying these techniques alongside Golden/Silver Ticket attacks to identify privilege escalation paths during controlled engagements.

What is the best way to enumerate Active Directory components for lateral movement?▼

Active Directory lateral movement techniques like NTLM relay and DCSync enable attackers to compromise the domain by exploiting misconfigurations and shadow credentials. This skill structures these techniques to identify and remediate weaknesses in enterprise environments.

Can I use this for red-team engagements in enterprise environments?▼

This skill applies to enterprise environments where Active Directory security posture is evaluated. It focuses on domain controllers, user privileges, and trust relationships to ensure tooling guidance satisfies offensive security engagement standards.

How does DCSync and NTLM relay impact domain-wide Active Directory security?▼

DCSync and NTLM relay enable domain-wide privilege escalation by exploiting Active Directory trust relationships and credential handling. This skill provides structured techniques to identify these lateral movement and persistence risks during controlled engagements.

Related Skills

Explore More Software Engineering Skills→
AeonDaveAeonDave
15

amass

Enumerate subdomains and map attack surfaces for a domain.

Community
Advanced
dtsongdtsong
1

kernel-security-skill

Analyze kernel security configurations and map privilege escalation paths.

Community
Advanced
rahmatullahbossrahmatullahboss

Active Directory Attacks

Test Windows Active Directory security with reconnaissance, credential extraction, and Kerberos attacks.

Community
Advanced
zebbernzebbern
4.5k

Red Team Tools and Methodology

Automate red-team reconnaissance and vulnerability discovery workflows.

Community
Advanced