What is the purpose of the Active Directory Security Testing skill?

This skill provides a structured reference and automated command generation for security professionals performing authorized audits and penetration tests on Microsoft Active Directory environments.

Can this skill assist with vulnerability remediation?

Yes, by identifying specific misconfigurations such as disabled SMB signing or vulnerable certificate templates, it allows administrators to understand and patch security gaps.

Does this skill require specific environmental prerequisites?

For optimal use, users should have access to a security testing platform like Kali Linux, network visibility to a Domain Controller, and authorized testing credentials.

Which tools are integrated into this skill's workflow?

The skill utilizes industry-standard tools including BloodHound for path visualization, the Impacket suite for network protocols, Rubeus for Kerberos attacks, and Mimikatz for credential extraction.

Active Directory Security Testing

Name: Active Directory Security Testing
Author: claudiodearaujo

byclaudiodearaujo

0•

安全与测试

Provides comprehensive methodologies and command references for auditing Microsoft Active Directory environments during authorized penetration tests.

This skill equips security professionals and red teams with a standardized framework for evaluating Active Directory security posture. It covers the full lifecycle of a domain assessment, including reconnaissance with BloodHound, credential harvesting via Kerberoasting and AS-REP roasting, lateral movement techniques, and domain dominance analysis. By integrating essential tools like Impacket and Mimikatz, it streamlines the identification of misconfigurations and vulnerabilities within Windows domain environments, enabling organizations to proactively harden their infrastructure against modern threat vectors.

主要功能

01Detailed Kerberos attack modules including roasting and ticket forgery

02Step-by-step guidance for critical AD CVE exploitation

03Credential extraction and lateral movement command references

04Comprehensive AD reconnaissance and path visualization workflows

050 GitHub stars

06Standardized procedures for DCSync and NTLM relay attacks

使用场景

01Educational walkthroughs for professional penetration testing certifications

02Conducting authorized red team operations to test domain resilience

03Performing security audits to identify exploitable AD misconfigurations

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/sistema-de-narra-o-de-livro-front active-directory-attacks

For use in Claude.ai and ChatGPT

Download Skill

主要功能

01Detailed Kerberos attack modules including roasting and ticket forgery

02Step-by-step guidance for critical AD CVE exploitation

03Credential extraction and lateral movement command references

04Comprehensive AD reconnaissance and path visualization workflows

050 GitHub stars

06Standardized procedures for DCSync and NTLM relay attacks

使用场景

01Educational walkthroughs for professional penetration testing certifications

02Conducting authorized red team operations to test domain resilience

03Performing security audits to identify exploitable AD misconfigurations

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/sistema-de-narra-o-de-livro-front active-directory-attacks

For use in Claude.ai and ChatGPT

Download Skill