Skip to content
Get packs

Active Directory Attack

Guides an agent through Active Directory and internal-network attack techniques for authorized pentests

Source Download skill
Repository
AIPentest/CyberStrikeAI
Stars
8,323
Licence
Apache-2.0
Files
1 file

What it does

This skill gives an AI agent a condensed playbook of techniques used to attack Windows Active Directory domains and internal networks, such as finding vulnerable certificate services, relaying NTLM authentication, Kerberos ticket attacks, and abusing known domain vulnerabilities. Once installed, when a user asks about attacking Active Directory, ADCS, NTLM relay, or an internal domain, the agent can recall and suggest specific tools (BloodHound, Certipy, ntlmrelayx, mitm6, Responder, secretsdump) and attack paths. It is written in Chinese with English tool names, and the file itself contains only instructions, not executable code.

Great for

  • Professional penetration testers preparing or running an authorized Active Directory assessment
  • Red team operators who want a quick reminder of common AD attack paths and tool syntax
  • Security students studying how internal domain attacks work so they can defend against them

Skip it if

  • Attacking networks or domains you do not own or lack written permission to test, since these techniques can cause illegal intrusion and real damage
  • Defenders looking for remediation steps, since the file lists attacks only and gives no hardening or detection guidance
  • Beginners expecting a step-by-step tutorial, since the content is terse command shorthand that assumes existing expertise

Try asking

  • “Which ADCS ESC techniques should I check first on this client's Active Directory, and how do I run certipy find?”
  • “Explain how an NTLM relay attack chains with coercion methods like PetitPotam to reach a domain controller.”
  • “What are the common Kerberoasting and AS-REP roasting steps for an internal assessment?”
  • “Give me the mitm6 and ntlmrelayx workflow for an IPv6 internal network test I am authorized to perform.”
Step-by-step guide: how to use Active Directory AttackInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the Apache-2.0 licence and an attribution note.

    active-directory-attack.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip active-directory-attack.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip active-directory-attack.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Only use this skill with written authorization for the specific systems in scope, and keep records of testing.
  • Ask the agent to explain the reasoning behind each technique and the defensive mitigation for it, since the file itself gives none.
  • Verify any command syntax against current official tool documentation before running it, because the shorthand may be incomplete or outdated.

What's inside

  • SKILL.md

Redistributed unmodified from AIPentest/CyberStrikeAI under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.