Active Directory Attacks

This is a red team and pentesting template that walks you through attacking Active Directory environments. It covers the standard playbook: recon, credential dumping, Kerberos exploitation, lateral movement, and privilege escalation to domain admin. You'll need domain access and tools like Impacket, Mimikatz, BloodHound, and CrackMapExec already set up. The skill failed some security audits, which makes sense given it's literally teaching offensive techniques. If you're doing authorized AD assessments and want Claude to help structure your attack methodology, this gives you a solid framework. Obviously only use this in environments where you have explicit permission.

GitHub stars: 30.2K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add davila7/claude-code-templates --skill 'Active Directory Attacks' --agent claude-code

Installs into .claude/skills of the current project.

Files

Active Directory Attacks

Purpose

Provide comprehensive techniques for attacking Microsoft Active Directory environments. Covers reconnaissance, credential harvesting, Kerberos attacks, lateral movement, privilege escalation, and domain dominance for red team operations and penetration testing.

Inputs/Prerequisites

Kali Linux or Windows attack platform
Domain user credentials (for most attacks)
Network access to Domain Controller
Tools: Impacket, Mimikatz, BloodHound, Rubeus, CrackMapExec

Outputs/Deliverables

Domain enumeration data
Extracted credentials and hashes
Kerberos tickets for impersonation
Domain Administrator access
Persistent access mechanisms

Essential Tools

Tool	Purpose
BloodHound	AD attack path visualization
Impacket	Python AD attack tools
Mimikatz	Credential extraction
Rubeus	Kerberos attacks
CrackMapExec	Network exploitation
PowerView	AD enumeration
Responder	LLMNR/NBT-NS poisoning