Is this skill suitable for blue teams?

Absolutely. It helps defenders understand how attackers visualize AD environments, allowing for better identification and remediation of dangerous privilege escalation paths.

Does this skill require specific tools?

Yes, it assumes access to tools like SharpHound for data collection and BloodHound CE or Legacy for graph visualization and analysis.

Can I use this skill for automated exploitation?

No, this skill provides the guidance, workflows, and queries for a security professional to perform manual, authorized testing safely.

Which MITRE ATT&CK techniques are covered?

The skill covers several techniques including T1087.002 (Account Discovery), T1069.002 (Permission Groups Discovery), and T1482 (Domain Trust Discovery).

What is the primary purpose of the BloodHound skill?

It provides a standardized methodology for using BloodHound to identify and exploit hidden relationship-based attack paths in Active Directory environments.

Active Directory Exploitation with BloodHound

Name: Active Directory Exploitation with BloodHound
Author: micsapp

bymicsapp

0•

Security & Testing

Guides security professionals through mapping and exploiting complex Active Directory attack paths using BloodHound graph theory.

This skill provides Claude with expert-level knowledge for conducting authorized Active Directory security assessments using BloodHound. It offers structured workflows for collecting domain data via SharpHound, executing advanced Cypher queries to uncover hidden privilege escalation paths, and identifying critical misconfigurations like AS-REP roasting and ACL-based vulnerabilities. By integrating MITRE ATT&CK mapping and prioritized exploitation planning, this skill helps red teamers and penetration testers efficiently navigate from initial access to Domain Admin while maintaining professional documentation and OPSEC standards.

Key Features

01Guidance on ACL-based escalation including GenericWrite and WriteDACL

02Detailed analysis of Kerberoasting and AS-REP roasting opportunities

03Standardized MITRE ATT&CK mapping for professional reporting

040 GitHub stars

05Advanced Cypher queries for identifying shortest paths to Domain Admin

06Comprehensive SharpHound and BloodHound.py collection workflows

Use Cases

01Building defensive detection capabilities based on known attack paths

02Identifying and remediating misconfigured Active Directory permissions

03Conducting authorized red team engagements and penetration tests

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add micsapp/micstec-skills exploiting-active-directory-with-bloodhound

For use in Claude.ai and ChatGPT

Key Features

01Guidance on ACL-based escalation including GenericWrite and WriteDACL

02Detailed analysis of Kerberoasting and AS-REP roasting opportunities

03Standardized MITRE ATT&CK mapping for professional reporting

040 GitHub stars

05Advanced Cypher queries for identifying shortest paths to Domain Admin

06Comprehensive SharpHound and BloodHound.py collection workflows

Use Cases

01Building defensive detection capabilities based on known attack paths

02Identifying and remediating misconfigured Active Directory permissions

03Conducting authorized red team engagements and penetration tests

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add micsapp/micstec-skills exploiting-active-directory-with-bloodhound

For use in Claude.ai and ChatGPT