ad-attacks

Identify and execute Active Directory attack chains to assess domain security.

18|3|Updated Apr 16, 2026
One-click install
npx skills add https://github.com/kalpmodi/akira --skill ad-attacks
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ad-attacks
Source: https://github.com/kalpmodi/akira/tree/main/skills/ad-attacks
Command: npx skills add https://github.com/kalpmodi/akira --skill ad-attacks

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identify and simulate Active Directory attack chains to reveal misconfigurations, weak controls, and pathways to domain compromise, enabling proactive security hardening.

Core Features & Use Cases

  • LDAP enumeration to map domain data, user accounts, and ACLs for surface discovery.
  • Kerberoasting, AS-REP roasting, and DCSync simulations to identify high-value credentials and replication weaknesses.
  • BloodHound path analysis and lateral movement planning to demonstrate feasible attack paths and mitigation opportunities.

Quick Start

Kick off an AD engagement by running a targeted plan to enumerate, escalate, and report findings.

Frequently Asked Questions about ad-attacks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I chain Active Directory attacks to assess domain security?

Simulating AD attack chains involves mapping domain data via LDAP enumeration, executing Kerberoasting or DCSync to expose weak credentials, and analyzing BloodHound paths to demonstrate lateral movement and domain compromise risks.

What is BloodHound path analysis and when do I need it for AD compromise?

BloodHound path analysis identifies feasible attack routes within Windows domains by mapping ACLs and trust relationships. Use it during AD engagements to demonstrate lateral movement opportunities and prioritize domain security hardening.

How do I perform Kerberoasting and AS-REP roasting across Windows domains?

Perform Kerberoasting and AS-REP roasting by targeting Kerberos misconfigurations to extract high-value credential hashes. This Skill simulates these attacks across Windows domains to expose weak authentication controls and account vulnerabilities.

Do I need Kerberos and LDAP knowledge to simulate DCSync attacks?

Yes, executing DCSync simulations requires knowledge of Kerberos, LDAP, and AD misconfigurations. You also need standard AD assessment tooling access to identify replication weaknesses and collect formal engagement evidence.

What's the best way to enumerate AD misconfigurations using LDAP?

Use LDAP enumeration to map domain data, user accounts, and ACLs for surface discovery. This Skill automates that mapping to reveal AD misconfigurations, weak controls, and pathways to domain compromise during security engagements.