kerberos-pentesting

No executable code or runtime malicious behavior is present in this fragment; however, it is highly actionable offensive guidance for Kerberos/Active Directory credential-access and authentication-bypass (enumeration, roasting, ticket forging, delegation abuse, and pass-the-ticket), including installation/use of exploitation tooling. In a supply-chain context, this represents a serious high-abuse content risk rather than code-level malware evidence.

该技能不是伪装成普通工具的窃密器，但它明确赋予 AI 代理进攻性 Kerberos/AD 攻击能力，覆盖枚举、凭据提取、票据伪造和横向移动，属于高风险安全/利用型技能。数据流主要直达目标基础设施而非陌生中转站，因此更像危险的攻击手册而非确认恶意软件；不过其能力范围与现实影响都很高，且第三方工具安装存在中等供应链风险。