Skip to content
Get packs

Active Directory Offensive Testing

Guides an agent through Active Directory attack methodology for authorized red team engagements

Source Download skill
Repository
SnailSploit/Claude-Red
Stars
10,230
Licence
MIT
Files
1 file

What it does

This skill gives an AI agent a detailed playbook for attacking Windows Active Directory networks, the systems companies use to manage logins and permissions. Once installed, the agent can walk through reconnaissance, credential theft (such as Kerberoasting and NTLM relay), privilege escalation, lateral movement, persistence, and ADCS certificate abuse, including the exact commands and tools to use. It is written for professional penetration testers working inside an authorized engagement.

Great for

  • Professional red team operators running authorized internal network assessments
  • Security students studying Active Directory attack paths in a lab environment
  • Blue teams who want to understand attacker techniques to build detections

Skip it if

  • Attacking networks without written authorization, which is illegal and causes real harm
  • Beginners hoping for a guided hacking tutorial, since the content assumes deep Windows and AD expertise
  • Environments where you cannot safely test, because commands such as LSASS dumping, DCSync and GPO changes can disrupt or compromise production systems

Try asking

  • “Map likely attack paths to Domain Admin from a BloodHound export in our authorized lab”
  • “Explain how an ESC1 ADCS misconfiguration works and how to verify it with certipy”
  • “Create a step-by-step Kerberoasting plan with detection-cost considerations for our red team report”
  • “Suggest a safe, documented sequence for validating constrained delegation risk in our test domain”
Step-by-step guide: how to use Active Directory Offensive TestingInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the MIT licence and an attribution note.

    offensive-active-directory.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip offensive-active-directory.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip offensive-active-directory.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Only use it with written scope documents and a defined rules of engagement; state the engagement context at the start of each request
  • Ask the agent to log timestamps and actions as it goes, since the skill recommends documenting every step
  • Treat the output as methodology: the agent still needs you to verify commands against the current tool versions before running them

What's inside

  • SKILL.md

Redistributed unmodified from SnailSploit/Claude-Red under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.