Claude Skills · DevOps & Infrastructure

Adcs Attacks

ADScanPro/Claude-AD

Active Directory Certificate Services (AD CS) escalation techniques ESC1 through ESC17, driven by hand with Certipy (ly4k). Use when the target runs a Certificate Authority and you want to find vulnerable certificate templates or CA misconfigurations, request a certificate that impersonates a privileged user, and know the exact certipy command, what each ESC actually checks, the Windows Event IDs that fire, and the remediation. ESC1 and ESC8 are the two you hit most in the field.

★ 137 Synced 1 hour ago View SKILL.md

At a glance

DevOps & Infrastructure Plugin install Auth required Actively maintained

This skill is for DevOps & Infrastructure and helps you identify vulnerable certificate templates in active director, exploit ad cs misconfigurations to escalate privileges, and request certificates impersonating privileged users.

Setup, runtime and requirements describe ADScanPro/Claude-AD, the repo this skill ships in.

active-directoryAd CsCertificate ServicesCertipyEsc EscalationPrivilege Escalation

Also in ADScanPro/Claude-AD

View the repo
Acl Abuse DevOps & Infrastructure

Abusing Active Directory object ACLs (DACL/ownership) for privilege escalation and lateral movement (GenericAll, GenericWrite, WriteDACL, Wr...

Ad Environment Constraints DevOps & Infrastructure

Real-world Active Directory environment constraints that silently break attacks when ignored: NTLM disabled (Kerberos fallback), AES-only KD...

The order of operations for an Active Directory penetration test: setup, collection, exploitation, post-processing. Use this whenever you ar...

The telemetry each Active Directory technique generates and what alerts a defender: Kerberoasting produces Event 4769 with RC4 encryption (0...

Coercion Ntlm Relay DevOps & Infrastructure

Authentication coercion (PetitPotam MS-EFSR, PrinterBug MS-RPRN, DFSCoerce MS-DFSNM) chained into NTLM relay (impacket ntlmrelayx) toward LD...

A high-level conceptual mapping from Active Directory attack techniques to the compliance controls they touch. Kerberoasting relates to auth...

Kerberos-based Active Directory attacks driven by hand with standard tooling (Kerberoasting, AS-REP roasting, and delegation abuse: unconstr...

Other DevOps & Infrastructure skills

Wizard mattpocock/skills

Generate an interactive bash wizard that walks a human through a manual procedure — third-party setup, a one-off migration, an A→B state tra...

Git Guardrails Claude Code mattpocock/skills

Set up Claude Code hooks to block dangerous git commands (push, reset --hard, clean, branch -D, etc.) before they execute. Use when user wan...

Setup Matt Pocock Skills mattpocock/skills

Configure this repo for the engineering skills — set up its issue tracker, triage label vocabulary, and domain doc layout. Run once before f...

Setup TS Deep Modules mattpocock/skills

Wire dependency-cruiser into a TypeScript repo so each package is a deep module — implementation hidden in subfolders, reachable only throug...

Setup Pre Commit mattpocock/skills

Set up Husky pre-commit hooks with lint-staged (Prettier), type checking, and tests in the current repo. Use when user wants to add pre-comm...

Azure Container Registry CLI github/awesome-copilot

Manage Azure Container Registry via the az acr CLI including registries, images, cloud builds, ACR Tasks, authentication, tokens, geo-replic...