competition-windows-pivot

Trace Windows credential pivots and Kerberos ticket acceptance across hosts.

4|Updated Apr 9, 2026
One-click install
npx skills add https://github.com/xjtu-wang/DigAgent --skill competition-windows-pivot
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: competition-windows-pivot
Source: https://github.com/xjtu-wang/DigAgent/tree/main/.agents/skills/competition-windows-pivot
Command: npx skills add https://github.com/xjtu-wang/DigAgent --skill competition-windows-pivot

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill provides structured guidance to trace Windows credential pivots, replayed material, and host-to-host privilege movement within a sandboxed security analysis workflow, helping researchers prove privilege edges and maintain reproducible evidence.

Core Features & Use Cases

  • Trace Kerberos replay, Windows pivots, and ticket acceptance across hosts.
  • Map and document the pivot chain with concrete replay artifacts and destination effects.
  • Reference checklists and evidence blocks to avoid common pitfalls.

Quick Start

Compress the pivot into a concrete chain from foothold to pivot host and reproduce the resulting privilege edge.

Frequently Asked Questions about competition-windows-pivot

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I trace Kerberos ticket replay across Windows hosts in a CTF sandbox?

Trace Windows pivots by mapping the source host, recovered artifacts, replay path, destination host, and resulting capability. You document every boundary crossing to maintain reproducible evidence of privilege movement.

What is the best way to document Windows credential acceptance and privilege movement?

Document Windows credential acceptance by compressing the pivot into a concrete chain from the foothold to the pivot host. You use reference checklists and evidence blocks to avoid common pitfalls and reproduce the privilege edge.

Can I use this skill to map SPNs and Kerberos delegation in a sandboxed security analysis workflow?

Yes, you can map SPNs and Kerberos delegation in sandboxed security analysis. The skill is applied to CTF-style scenarios involving Kerberos tickets, SPNs, delegation, and host-to-host pivots to prove privilege edges.

How do I prove privilege movement using recovered Windows artifacts and replay paths?

Prove privilege movement by tracing recovered artifacts and replayed material across hosts. You map the pivot chain with concrete replay artifacts and destination effects to demonstrate the resulting capability.

Why do I need to document every boundary crossing when tracing Windows pivots?

Document every boundary crossing to maintain reproducible evidence of the pivot chain. Strict documentation prevents gaps in proving privilege movement across Kerberos ticket acceptance and host-to-host delegation paths.