Does it cover modern vulnerabilities like PrintNightmare?

Yes, the skill includes quick reference commands for checking and auditing critical domain vulnerabilities such as ZeroLogon, PrintNightmare, and samAccountName spoofing.

What are the prerequisites for using these security techniques?

Users generally require an authorized security testing platform (like Kali Linux), network access to the Domain Controller, and appropriate permissions for auditing.

Can this skill help identify misconfigured domain permissions?

Yes, it includes specialized workflows for BloodHound and PowerView to enumerate domain objects, group memberships, and potential privilege escalation paths.

Is this skill suitable for blue teams and defenders?

Absolutely. By understanding the techniques used to evaluate AD, defenders can better implement detection rules, remediate misconfigurations, and harden domain controllers.

What tools are supported by this Active Directory skill?

The skill provides guidance and syntax for industry-standard security tools including Impacket, BloodHound, Rubeus, Mimikatz, and CrackMapExec.

Active Directory Security Auditing

Name: Active Directory Security Auditing
Author: claudiodearaujo

byclaudiodearaujo

0•

Seguridad y Pruebas

Provides professional frameworks and commands for assessing the security posture of Microsoft Active Directory environments.

This skill serves as a comprehensive reference for security professionals and red teams conducting authorized penetration testing on Active Directory (AD) infrastructures. It streamlines the evaluation process by providing standardized workflows for domain reconnaissance, Kerberos security auditing, and vulnerability assessment. From identifying misconfigured service accounts via Kerberoasting to visualizing attack paths with BloodHound, this skill helps practitioners identify and remediate critical security gaps like credential exposure and lateral movement risks within a Windows domain.

Características Principales

01Comprehensive AD reconnaissance and attack path visualization

02Standardized lateral movement and privilege escalation techniques

03Vulnerability testing for critical CVEs like ZeroLogon and PrintNightmare

040 GitHub stars

05Credential security assessment for Kerberos and NTLM protocols

06Active Directory Certificate Services (AD CS) misconfiguration auditing

Casos de Uso

01Conducting professional internal security audits and red team operations

02Identifying and remediating path-to-compromise vulnerabilities in domain environments

03Validating the effectiveness of Active Directory security controls and monitoring

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/sistema-de-narra-o-de-livro-front active-directory-attacks

For use in Claude.ai and ChatGPT

Download Skill

Características Principales

01Comprehensive AD reconnaissance and attack path visualization

02Standardized lateral movement and privilege escalation techniques

03Vulnerability testing for critical CVEs like ZeroLogon and PrintNightmare

040 GitHub stars

05Credential security assessment for Kerberos and NTLM protocols

06Active Directory Certificate Services (AD CS) misconfiguration auditing

Casos de Uso

01Conducting professional internal security audits and red team operations

02Identifying and remediating path-to-compromise vulnerabilities in domain environments

03Validating the effectiveness of Active Directory security controls and monitoring

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/sistema-de-narra-o-de-livro-front active-directory-attacks

For use in Claude.ai and ChatGPT

Download Skill