active-directory-attacks

Name: active-directory-attacks
Availability: InStock
Author: 0X6C7879

Enumerate and exploit Active Directory misconfigurations with Kerberos and BloodHound workflows.

Updated Aug 23, 2026

Search Tags:#pentesting #active-directory #kerberos #kerberoasting #dcsync #asreproasting #bloodhound

Ready to run

npx skills add https://github.com/0X6C7879/aegissec --skill active-directory-attacks-0x6c7879

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: active-directory-attacks
Source: https://github.com/0X6C7879/aegissec/tree/main/skills/active-directory-attacks
Command: npx skills add https://github.com/0X6C7879/aegissec --skill active-directory-attacks-0x6c7879

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Efficiently discover and exploit AD misconfigurations to map attack surfaces, identify privilege escalation paths, and simulate realistic domain compromises in controlled assessments.

Core Features & Use Cases

AD reconnaissance and enumeration: Kerberos-based attacks, ASREPRoasting, DCSync, and BloodHound data collection to reveal reachable targets and credentials.
Credential dumping and lateral movement: Techniques like Mimikatz and PtH/PTT workflows to traverse the domain and extract credentials safely in test environments.
Attack path analysis & persistence planning: BloodHound-inspired path analysis to plan persistence and privilege escalation with repeatable workflows.

Quick Start

Run a targeted AD assessment to enumerate Kerberos attacks and BloodHound data.

Frequently Asked Questions about active-directory-attacks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I enumerate Active Directory environments for Kerberos attacks during a security assessment?▼

Active Directory attack path analysis maps privilege escalation routes using BloodHound-inspired data collection. It reveals reachable targets and credentials by visualizing domain misconfigurations to plan persistence and simulate realistic domain compromises safely.

What is the best way to extract credentials and move laterally in an Active Directory domain?▼

Extracting credentials and moving laterally in an Active Directory domain involves using Mimikatz and Pass-the-Hash/Pass-the-Ticket workflows. These techniques traverse the domain to safely extract credentials and simulate lateral movement in controlled test environments.

When do I need to use DCSync and Mimikatz techniques for Active Directory exploitation?▼

Use DCSync and Mimikatz techniques for Active Directory exploitation when simulating credential dumping and domain compromise. These methods extract credentials and manipulate authentication tickets to demonstrate privilege escalation during controlled security assessments.

Can I use BloodHound analysis to plan Active Directory persistence and privilege escalation?▼

Yes, you can use BloodHound analysis to plan Active Directory persistence and privilege escalation. BloodHound-inspired path analysis maps attack surfaces, identifies misconfigurations, and creates repeatable workflows for domain compromise simulations.

Do I need prior knowledge of ASREPRoasting and Kerberoasting to perform AD security assessments?▼

Yes, performing AD security assessments requires knowledge of ASREPRoasting, Kerberoasting, DCSync, and Mimikatz techniques. You also need understanding of Active Directory misconfiguration context to efficiently discover and exploit vulnerabilities.