Атаки на Active Directory для Red Team

★ 7.3 · security

Атаки на Active Directory (offensive-active-directory) is a Claude Code skill that delivers a complete offensive methodology for red team engagements against corporate Active Directory environments. It covers reconnaissance (BloodHound, SharpHound with throttling, ADExplorer snapshots, PowerView), credential harvesting (Kerberoasting, ASREProasting, NTLM relay, LLMNR/NBT-NS/mDNS poisoning, LSASS dumping via comsvcs.dll or nanodump), privilege escalation (ACL abuse, GPO abuse, unconstrained/constrained/RBCD delegation), lateral movement (Pass-the-Hash, Pass-the-Ticket, Overpass-the-Hash, WMI/WinRM/PsExec), persistence (Golden/Silver/Diamond Tickets, DCSync, DCShadow, Skeleton Key, AdminSDHolder), ADCS attacks (ESC1–ESC15), forest trust abuse, and evasion of Microsoft Defender for Identity. Reach for it when running an authorized internal network pentest, when scoping a hybrid AD/Entra ID assessment, when validating ADCS certificate infrastructure security, or when a red team engagement requires full attack-path documentation with timestamps. Ready-to-run commands use Rubeus, Impacket, Responder, Inveigh, and Bloodhound.py, with guidance on stealth collection modes and lowest-detection-cost path selection. Use only on systems where written authorization is in place — applying these techniques against unauthorized infrastructure is illegal.