skills.rest
salmanabdurrahman
salmanabdurrahmanCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

ad-bloodhound-review

Analyze offline Active Directory graph data for privilege escalation paths and delegation risks.

Updated Jul 30, 2026
Search Tags:#security audit#privilege escalation#graph analysis#bloodhound#active directory#ad security
One-click install
npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill ad-bloodhound-review
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ad-bloodhound-review
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/ad-bloodhound-review
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill ad-bloodhound-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the risk of privilege escalation in Active Directory environments by providing a structured, offline method to analyze graph data for security gaps without requiring active, intrusive scanning.

Core Features & Use Cases

  • Privilege Path Discovery: Identifies shortest paths to Domain Admins and other high-value targets.
  • Delegation & Session Risk: Detects unconstrained delegation, Kerberoastable accounts, and risky session patterns.
  • Tiering & Hygiene: Highlights tier-0 boundary violations and stale privileged accounts.
  • Use Case: A security auditor can use this to review a SharpHound export to identify and remediate dangerous ACL edges or delegation misconfigurations before they are exploited.

Quick Start

Use the ad-bloodhound-review skill to analyze the provided BloodHound JSON export for potential privilege escalation paths and delegation risks.

Frequently Asked Questions about ad-bloodhound-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I analyze BloodHound exports for Active Directory privilege escalation paths?▼

Offline Active Directory graph analysis identifies privilege escalation paths by evaluating BloodHound JSON exports to map shortest paths to Domain Admins and highlight dangerous ACL edges without active network enumeration.

What is offline AD security analysis and how does it detect delegation risks?▼

Offline AD security analysis evaluates graph data from BloodHound exports to detect delegation risks like unconstrained delegation and Kerberoastable accounts, ensuring security assessments occur without intrusive network scanning.

Can I review LDAP dumps to identify Active Directory tiering violations?▼

Yes, you can review LDAP dumps and BloodHound exports to highlight tier-0 boundary violations and stale privileged accounts, supporting structured security audits through offline graph data evaluation.

Do I need active network enumeration to find Kerberoastable accounts in my AD environment?▼

No, active network enumeration is not required. The analysis evaluates offline BloodHound and LDAP data to detect Kerberoastable accounts, risky session patterns, and misconfigurations securely without touching the live network.

What are the limitations of offline Active Directory graph analysis for security audits?▼

Offline Active Directory graph analysis requires strict adherence to authorization, scope validation, and data redaction policies. It relies on existing BloodHound exports and LDAP dumps, meaning it cannot detect changes occurring after the data export.

Related Skills

Explore More Data & Analytics Skills→
AeonDaveAeonDave
15

bloodhound

Map Active Directory attack paths and identify privilege escalation opportunities.

Community
Advanced
blacklanternsecurityblacklanternsecurity
253

acl-abuse

Exploit misconfigured Active Directory ACLs for privilege escalation.

Official
Advanced
woohyun212woohyun212
21

ad-pentest

Perform six-phase Active Directory penetration testing with BloodHound and ADCS enumeration.

Community
Advanced
kazukinagatakazukinagata
3

viewing-tasks

Render Waggle tasks as Kanban, List, Calendar, and Gantt views via a local server.

Community
Advanced