less-aggressive-attack

What problem does it solve?

This Skill ensures security testing is conducted in a safe and controlled manner, minimizing the risk of unintended damage to systems.

Core Features & Use Cases

• Safety-First Testing: Provides a strict set of rules to guide testing, ensuring no irreversible actions are taken.
• Targeted Enumeration: Uses targeted queries for AD enumeration to avoid triggering SIEM alerts.
• Privilege Escalation: Confirms access without exercising destructive actions, like LSASS dumping.
• Read-Only Proof: Confirms the existence of a vulnerability without modifying data or systems.
• Scope Discipline: Strictly adheres to the engagement scope, preventing out-of-scope actions.
• Use Case: Ideal for internal pentests where safety is a priority, such as on live production systems.

Quick Start

Run the 'less-aggressive-attack' skill to generate a non-destructive testing plan for your authorized AD pentest.