relaying-ntlm-for-adcs-esc8

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill embeds plaintext credentials (e.g., 'Password123!') and raw base64 certificate blobs directly into example commands, which requires the LLM to include secret values verbatim in outputs/commands and therefore poses a high exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This content intentionally documents and automates an NTLM coercion-and-relay (ESC8) attack to obtain CA-issued machine certificates and then convert them to TGTs/hashes for DCSync — explicit credential theft and domain compromise behavior.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow in scripts/agent.py ingests and parses untrusted free text from the externally generated ntlmrelayx process stdout stream (which contains Base64 certificate of user... lines) and then decodes the matched base64 to produce the .pfx output.