skills.rest
Acczdy
AcczdyCOMMUNITY
Explore all skills by this author →
GitHub

executing-active-directory-attack-simulation

Simulate Active Directory attacks and generate a structured JSON risk report.

2|Updated Apr 14, 2026
Search Tags:#active-directory#mimikatz#kerberoasting#bloodhound#impacket#ad-security
One-click install
npx skills add https://github.com/Acczdy/MoZiSec --skill executing-active-directory-attack-simulation
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: executing-active-directory-attack-simulation
Source: https://github.com/Acczdy/MoZiSec/tree/main/penetration-testing/.claude/skills/executing-active-directory-attack-simulation
Command: npx skills add https://github.com/Acczdy/MoZiSec --skill executing-active-directory-attack-simulation

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires impacket, ldap3, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Detects and reveals misconfigurations and credential weaknesses in Active Directory by simulating authorized attack techniques and mapping potential pathways to compromise.

Core Features & Use Cases

  • Performs LDAP-based enumeration of users and groups, Kerberoastable/service-principal-name accounts, and pre-authentication weaknesses.
  • Integrates with BloodHound, Mimikatz, and Impacket tooling to analyze attack paths, extract credentials, and demonstrate lateral movement scenarios.
  • Provides a structured JSON report summarizing risk posture and recommended mitigations for defenders and red teams.

Quick Start

Run the AD attack simulation agent against your target domain using approved test credentials in a lab or authorized environment.

Frequently Asked Questions about executing-active-directory-attack-simulation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an Active Directory attack simulation to find privilege escalation paths?▼

Active Directory attack simulation identifies privilege escalation paths by performing authorized LDAP enumeration and integrating BloodHound for path analysis. It reveals misconfigurations and credential weaknesses to map potential compromise pathways within an AD environment.

How does Kerberoasting work with Impacket to find weak AD credentials?▼

Kerberoasting with Impacket targets service-principal-name accounts to extract ticket-granting service tickets offline. The simulation cracks these tickets to reveal weak credentials and pre-authentication weaknesses within the domain environment.

Can I use Mimikatz and BloodHound together for red-team readiness assessments?▼

Yes, Mimikatz and BloodHound are integrated together for red-team readiness. BloodHound analyzes attack paths while Mimikatz extracts credentials, demonstrating lateral movement scenarios and validating SOC detection capabilities.

Do I need LDAP and Impacket libraries to enumerate AD data?▼

Yes, LDAP and Impacket libraries are required dependencies to enumerate AD data. The ldap3 library queries users and groups, while Impacket executes techniques like AS-REP roasting and delegation abuse during the simulation.

What is the best way to report AD misconfigurations found during a security assessment?▼

The best way to report AD misconfigurations is generating a structured JSON risk report. This summarizes the risk posture and provides recommended mitigations for defenders and red teams based on the simulated attack findings.

Related Skills

Explore More Software Engineering Skills→
hardw00thardw00t
90

network-pentest

Simulate attacker techniques across internal networks and Active Directory environments.

Community
Advanced
ArianHobson333ArianHobson333
7

chain-credential-reuse

Analyze authentication logs to identify credential reuse chains across services.

Community
Advanced
rahmatullahbossrahmatullahboss

Active Directory Attacks

Test Windows Active Directory security with reconnaissance, credential extraction, and Kerberos attacks.

Community
Advanced
saeed-vayghansaeed-vayghan
30

ad-security-reviewer

Analyze Active Directory security posture for identity attack paths and authentication policies.

Community
Advanced