skills.rest
trilwu
trilwuCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

attacking-active-directory

Automate Active Directory security assessments with Kerberoasting, credential dumping, and BloodHound analysis.

109|11|Updated Nov 13, 2025
Search Tags:#active-directory#mimikatz#lateral-movement#kerberoasting#dcsync#asreproasting#bloodhound
One-click install
npx skills add https://github.com/trilwu/secskills --skill attacking-active-directory
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: attacking-active-directory
Source: https://github.com/trilwu/secskills/tree/main/secskills/skills/active-directory-attacks
Command: npx skills add https://github.com/trilwu/secskills --skill attacking-active-directory

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates comprehensive Active Directory security assessments by orchestrating Kerberos-based attacks, credential dumping, and lateral movement to identify misconfigurations and privilege paths.

Core Features & Use Cases

  • Kerberos attacks: Kerberoasting and ASREPRoasting to enumerate weak service accounts and credentials.
  • Credential dumping and path pivoting: DCSync and Mimikatz-based credential extraction, with lateral movement techniques such as PtH and PtT.
  • BloodHound analysis: collect and map relationships to identify shortest attack paths to domain principals.
  • Use cases: red-team assessments, AD hardening validation, and privilege-escalation path discovery within Windows domains.

Quick Start

Run an AD security assessment against a Windows domain to enumerate Kerberoastable accounts, dump credentials, and map attack paths.

Frequently Asked Questions about attacking-active-directory

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Kerberoasting and ASREPRoasting attacks in Active Directory?▼

Active Directory security assessment automates Kerberoasting and ASREPRoasting to enumerate weak service accounts and extract credentials during Windows domain pentests.

What is the best way to map attack paths to domain principals in Windows domains?▼

BloodHound analysis collects and maps Active Directory relationships to identify the shortest attack paths and privilege escalation routes to domain principals.

How do I dump credentials using DCSync and Mimikatz for post-exploitation?▼

Credential dumping uses DCSync and Mimikatz-based extraction to pull credentials from Active Directory, enabling lateral movement techniques like Pass-the-Hash and Pass-the-Ticket.

Can I use lateral movement techniques like PtH and PtT for Windows domain pentests?▼

Yes, Active Directory security assessment applies Pass-the-Hash and Pass-the-Ticket lateral movement techniques for pivoting and post-exploitation within Windows domains.

Does this Active Directory assessment identify misconfigurations for red-team engagements?▼

Yes, it orchestrates Kerberos-based attacks, credential dumping, and BloodHound analysis to identify Active Directory misconfigurations and validate AD hardening for red-team assessments.

Related Skills

Explore More Education & Research Skills→
rahmatullahbossrahmatullahboss

Active Directory Attacks

Test Windows Active Directory security with reconnaissance, credential extraction, and Kerberos attacks.

Community
Advanced
aurainfosecaurainfosec

pmapper

Identify IAM privilege escalation paths to administrative access in AWS accounts.

Official
Intermediate
zebbernzebbern
4.5k

Linux Privilege Escalation

Enumerate and exploit privilege escalation paths on Linux systems.

Community
Advanced
jayjpatel9717jayjpatel9717

Active Directory & Kerberos Enumeration — INDRA

Detect Kerberos attacks and Active Directory misconfigurations using enumeration tools.

Community
Advanced