Claude Skills · DevOps & Infrastructure
Adcs Attacks
ADScanPro/Claude-ADActive Directory Certificate Services (AD CS) escalation techniques ESC1 through ESC17, driven by hand with Certipy (ly4k). Use when the target runs a Certificate Authority and you want to find vulnerable certificate templates or CA misconfigurations, request a certificate that impersonates a privileged user, and know the exact certipy command, what each ESC actually checks, the Windows Event IDs that fire, and the remediation. ESC1 and ESC8 are the two you hit most in the field.
At a glance
This skill is for DevOps & Infrastructure and helps you identify vulnerable certificate templates in active director, exploit ad cs misconfigurations to escalate privileges, and request certificates impersonating privileged users.
/plugin marketplace add ADScanPro/Claude-AD
/plugin install adcs-attacks
Setup, runtime and requirements describe ADScanPro/Claude-AD, the repo this skill ships in.
active-directoryAd CsCertificate ServicesCertipyEsc EscalationPrivilege Escalation
Also in ADScanPro/Claude-AD
View the repoAbusing Active Directory object ACLs (DACL/ownership) for privilege escalation and lateral movement (GenericAll, GenericWrite, WriteDACL, Wr...
Real-world Active Directory environment constraints that silently break attacks when ignored: NTLM disabled (Kerberos fallback), AES-only KD...
The order of operations for an Active Directory penetration test: setup, collection, exploitation, post-processing. Use this whenever you ar...
The telemetry each Active Directory technique generates and what alerts a defender: Kerberoasting produces Event 4769 with RC4 encryption (0...
Authentication coercion (PetitPotam MS-EFSR, PrinterBug MS-RPRN, DFSCoerce MS-DFSNM) chained into NTLM relay (impacket ntlmrelayx) toward LD...
A high-level conceptual mapping from Active Directory attack techniques to the compliance controls they touch. Kerberoasting relates to auth...
Kerberos-based Active Directory attacks driven by hand with standard tooling (Kerberoasting, AS-REP roasting, and delegation abuse: unconstr...
Other DevOps & Infrastructure skills
Generate an interactive bash wizard that walks a human through a manual procedure — third-party setup, a one-off migration, an A→B state tra...
Set up Claude Code hooks to block dangerous git commands (push, reset --hard, clean, branch -D, etc.) before they execute. Use when user wan...
Configure this repo for the engineering skills — set up its issue tracker, triage label vocabulary, and domain doc layout. Run once before f...
Wire dependency-cruiser into a TypeScript repo so each package is a deep module — implementation hidden in subfolders, reachable only throug...
Set up Husky pre-commit hooks with lint-staged (Prettier), type checking, and tests in the current repo. Use when user wants to add pre-comm...
Manage Azure Container Registry via the az acr CLI including registries, images, cloud builds, ACR Tasks, authentication, tokens, geo-replic...