active-directory-attack
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents specific command-line examples for common offensive security tools such as
ntlmrelayx,certipy,secretsdump,mitm6, andresponderfor use in internal network assessments. - [PRIVILEGE_ESCALATION]: Provides detailed information on methodologies for gaining elevated access within Active Directory environments, including exploitation of ADCS certificate services (ESC1/ESC8), DACL permissions abuse, and Domain Controller synchronization (DCSync).
- [DATA_EXFILTRATION]: Mentions techniques for extracting sensitive credential information (NTLM hashes) from Domain Controllers using
secretsdumpandresponderfor offline cracking or relaying.
Audit Metadata