Claude Skills · Legal

Kerberos Attacks

ADScanPro/Claude-AD

Kerberos-based Active Directory attacks driven by hand with standard tooling (Kerberoasting, AS-REP roasting, and delegation abuse: unconstrained, constrained/S4U, RBCD). Use when the target has SPN-bearing service accounts, accounts without pre-authentication, or delegation configured on computer/user objects, and you want the exact impacket/Rubeus/bloodyAD command, the hash format and hashcat mode, the Windows Event IDs that fire, and the remediation to write up.

★ 137 Synced 1 hour ago View SKILL.md

At a glance

Legal Plugin install Auth required Actively maintained

This skill is for Legal and helps you audit kerberos delegation configurations, identify kerberoasting attack vectors, and detect as-rep roasting vulnerabilities.

Setup, runtime and requirements describe ADScanPro/Claude-AD, the repo this skill ships in.

active-directoryKerberosPentestingincident-responseImpacketRubeus

Also in ADScanPro/Claude-AD

View the repo
Acl Abuse DevOps & Infrastructure

Abusing Active Directory object ACLs (DACL/ownership) for privilege escalation and lateral movement (GenericAll, GenericWrite, WriteDACL, Wr...

Adcs Attacks DevOps & Infrastructure

Active Directory Certificate Services (AD CS) escalation techniques ESC1 through ESC17, driven by hand with Certipy (ly4k). Use when the tar...

Ad Environment Constraints DevOps & Infrastructure

Real-world Active Directory environment constraints that silently break attacks when ignored: NTLM disabled (Kerberos fallback), AES-only KD...

The order of operations for an Active Directory penetration test: setup, collection, exploitation, post-processing. Use this whenever you ar...

The telemetry each Active Directory technique generates and what alerts a defender: Kerberoasting produces Event 4769 with RC4 encryption (0...

Coercion Ntlm Relay DevOps & Infrastructure

Authentication coercion (PetitPotam MS-EFSR, PrinterBug MS-RPRN, DFSCoerce MS-DFSNM) chained into NTLM relay (impacket ntlmrelayx) toward LD...

A high-level conceptual mapping from Active Directory attack techniques to the compliance controls they touch. Kerberoasting relates to auth...

Other Legal skills

Brand Guidelines anthropics/skills

Applies Anthropic's official brand colors and typography to any sort of artifact that may benefit from having Anthropic's look-and-feel. Use...

Code Review mattpocock/skills

Review the changes since a fixed point (commit, branch, tag, or merge-base) along two axes — Standards (does the code follow this repo's doc...

Meeting Notes nexu-io/open-design

Meeting notes page — title bar with attendees, agenda checklist, decisions block, action items table with owners + dates, and a "next meetin...

Magazine Poster nexu-io/open-design

An editorial-style poster — newsprint paper, dateline, oversized serif headline with a struck-through word and italic accent, a 2-column bod...

Pricing Page nexu-io/open-design

A standalone pricing page — header, plan tiers, feature comparison table, and an FAQ. Use when the brief asks for "pricing", "plans", "subsc...

Apple Hig nexu-io/open-design

Apple Human Interface Guidelines as 14 agent skills covering platforms, foundations, components, patterns, inputs, and technologies for iOS,...