Perform six-phase Active Directory penetration testing with BloodHound and ADCS enumeration.
npx skills add https://github.com/woohyun212/security-skill --skill ad-pentest
Please help me install this Agent Skill. Skill: ad-pentest Source: https://github.com/woohyun212/security-skill/tree/main/ad-pentest Command: npx skills add https://github.com/woohyun212/security-skill --skill ad-pentest
Identifies and prioritizes Active Directory attack paths, credential weaknesses, ADCS misconfigurations, and lateral movement opportunities to produce actionable findings and remediation guidance for enterprise Windows domains.
Run the ad-pentest workflow to perform a six-phase Active Directory assessment and generate a consolidated findings report.
High-intent search queries and answers about installing and using this skill.
Active Directory penetration testing requires documented authorization controls for internal Windows domain engagements. This structured assessment performs reconnaissance, credential attacks, ADCS enumeration, ACL analysis, and lateral movement checks to produce actionable findings.
Certipy is used during the ADCS enumeration phase to identify ESC issues and certificate template weaknesses in enterprise Windows domains. This six-phase assessment processes authenticated enumeration data to produce prioritized, remediation-focused findings.
Yes, BloodHound-compatible collection identifies Kerberoastable accounts during the credential attacks phase. The assessment orchestrates BloodHound data with Kerberos and NTLM tooling to capture evidence and generate prioritized attack paths.
Yes, the assessment includes dedicated lateral movement checks and ACL privilege escalation analysis phases. It orchestrates impacket and crackmapexec to validate movement opportunities and ACL weaknesses across enterprise domains.
Internal Active Directory penetration testing requires BloodHound, certipy, impacket, crackmapexec, kerbrute, and Responder. This assessment orchestrates these tools for LDAP enumeration, credential attacks, and ADCS analysis to generate consolidated reports.
brucesongsEnumerate Active Directory LDAP environments to reveal users, groups, SPNs, and credential artifacts.
saeed-vayghanAnalyze Active Directory security posture for identity attack paths and authentication policies.
rahmatullahbossTest Windows Active Directory security with reconnaissance, credential extraction, and Kerberos attacks.
hardw00tSimulate attacker techniques across internal networks and Active Directory environments.
