Active Directory Attacks
Warn
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATIONPRIVILEGE_ESCALATIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous shell and PowerShell commands for security tools such as Impacket, Mimikatz, Rubeus, and CrackMapExec to execute attacks against domain infrastructure.
- [DATA_EXFILTRATION]: Provides specific instructions for extracting sensitive data, including password hashes (DCSync, Kerberoasting, AS-REP roasting) and Kerberos tickets (Golden/Silver tickets) from Domain Controllers and workstations.
- [PRIVILEGE_ESCALATION]: Detailed workflows are included for exploiting critical vulnerabilities like ZeroLogon (CVE-2020-1472) and PrintNightmare (CVE-2021-1675), as well as misconfigured AD Certificate Services (ESC1) to gain unauthorized administrative access.
- [PERSISTENCE]: The skill explicitly documents the creation of persistent access mechanisms, including the forgery of Golden Tickets and the use of SharpGPOAbuse to create backdoors via Group Policy Objects.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the target Active Directory environment, creating a surface for indirect prompt injection.
- Ingestion points: Network data ingested by tools like
bloodhound-python,certipy, andSharpHound.exe(SKILL.md, references/advanced-attacks.md). - Boundary markers: Absent; the instructions do not specify delimiters or warnings for processed data.
- Capability inventory: High; the agent has access to numerous subprocess calls, network operations, and credential extraction tools.
- Sanitization: Absent; there is no mention of validating or escaping content retrieved from the domain environment.
Audit Metadata