adtest

Orchestrate end-to-end Active Directory pentesting workflows with phase-gated state management.

Updated Jun 23, 2024
One-click install
npx skills add https://github.com/n4igme/randscript --skill adtest
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: adtest
Source: https://github.com/n4igme/randscript/tree/main/llm/skills/adtest
Command: npx skills add https://github.com/n4igme/randscript --skill adtest

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pyyaml, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This solution provides a structured, repeatable AD penetration testing workflow that guides practitioners from initial recon to final reporting, including automated state tracking and evidence gathering.

Core Features & Use Cases

  • 6-phase gated workflow for domain-joined Windows environments, covering recon, credential harvest, Kerberos attacks, relay/delegation, privilege escalation, and reporting
  • Built-in state management and artifacts (state.yaml, scope.md, phase outputs, findings log) to ensure reproducibility and auditability
  • References and scripts to perform deterministic tasks and on-demand information retrieval during engagements

Quick Start

Initialize a new AD pentest engagement with domain, DC IP, and target scope, then advance phases by following gate checks and recording evidence.

Frequently Asked Questions about adtest

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I structure an Active Directory pentest workflow from recon to reporting?

An Active Directory pentest workflow can be structured using a 6-phase gated process covering recon, credential harvesting, Kerberos attacks, relay/delegation, privilege escalation, and reporting to ensure reproducibility and auditability.

Can I track state and gather evidence automatically during an AD penetration test?

Yes, you can track state and gather evidence during an AD penetration test using built-in state management artifacts like state.yaml, scope.md, phase outputs, and a findings log to ensure engagement reproducibility.

What do I need to initialize an AD pentest engagement in a domain-joined environment?

To initialize an AD pentest engagement, you need to define the target domain, Domain Controller IP, and target scope, then advance phases by following gate checks and recording evidence.

Does this AD pentesting workflow support automated risk documentation and reporting?

Yes, the workflow supports automated risk documentation and reporting by orchestrating evidence collection and risk documentation across multiple targets during the final reporting phase.

Why use a phase-gated workflow for red-team assessments in Windows environments?

A phase-gated workflow ensures deterministic task execution and on-demand information retrieval for red-team assessments in Windows environments, enforcing structured progress tracking before advancing to subsequent attack phases.