ldap-pentesting

This skill is internally consistent with its stated purpose, but that purpose is offensive LDAP pentesting. It enables high-impact actions: enumeration, password attacks, credential discovery from local files, Kerberoasting preparation, MITM guidance, and LDAP attribute modification. No clear malware or deceptive exfiltration is present, and the flagged install pattern is low-to-moderate supply-chain hygiene risk only. Overall classification: SUSPICIOUS/HIGH-RISK due to offensive security capability for an AI agent, not because of malicious concealment.

This fragment is an offensive AD/LDAP attack playbook. It provides explicit instructions and payloads for LDAP injection, Kerberos credential attacks (Kerberoasting/AS-REP roasting), reconnaissance (including BloodHound), and local extraction/cracking workflows using sensitive materials (keytab and LDAP backend files). While it does not demonstrate covert supply-chain malware mechanics (e.g., hidden exfiltration/persistence/obfuscation) because it is not actual dependency code, including such content in a distributed package or automation would constitute a high security risk because it substantially facilitates unauthorized access and credential theft.