Active Directory Attacks
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCE
Full Analysis
- [COMMAND_EXECUTION]: The skill contains a large collection of shell and PowerShell commands intended for security testing, involving tools such as Impacket, BloodHound, Mimikatz, and Rubeus to interact with network services and Domain Controllers.
- [PRIVILEGE_ESCALATION]: The instructions detail techniques for escalating privileges within an Active Directory environment, including Kerberoasting, AS-REP roasting, DCSync attacks, and exploiting misconfigured Certificate Services (AD CS).
- [PERSISTENCE]: The skill documents methods for achieving domain persistence, specifically through the creation of Kerberos Golden and Silver tickets, which allow for long-term impersonation of administrative accounts.
- [COMMAND_EXECUTION]: Provides guidance on exploiting critical vulnerabilities such as ZeroLogon (CVE-2020-1472), PrintNightmare (CVE-2021-1675), and samAccountName spoofing to gain unauthorized access.
Audit Metadata