active-directory-attack

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is an explicit offensive playbook detailing intranet/Active Directory attack techniques and tooling (NTLM relay, Kerberos abuse, Zerologon, PrintNightmare, mitm6, etc.), indicating intentional malicious guidance for compromising networks.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill contains explicit, actionable instructions to modify system state (e.g., write SSH keys via Redis CONFIG SET, clear DC machine account passwords via Zerologon, change DACLs to grant DCSync, and obtain/alter certificates), which would allow privilege escalation and persistent access on hosts.