ad-dacl-abuse
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents command-line examples for various security tools including
impacket-secretsdump,bloodyAD,certipy, andpywhisker. These are intended for use by security professionals to perform actions such as password resets, service principal name (SPN) configuration, and credential harvesting within a target Active Directory environment. - [PRIVILEGE_ESCALATION]: The instructions detail techniques for escalating privileges by exploiting misconfigured permissions (e.g., GenericAll, WriteDACL, DCSync). The content describes how a penetration tester can move from a low-privileged account to domain-level access by following permission edges identified in tools like BloodHound.
Audit Metadata