Skill UI

A comprehensive tool for authorized red-team engagements, designed to map complex on-prem Active Directory and cloud Entra ID attack paths. It uses SharpHound and AzureHound to collect rich data, ingesting it into BloodHound CE for analysis using built-in queries and custom Cypher. Effectively identifies privilege escalation chains leading to domain or tenant compromise, especially in hybrid identity environments.

A comprehensive guide detailing advanced, authorized techniques for Active Directory security testing and red teaming. It covers critical attack vectors such as Kerberos exploitation, BloodHound path analysis, NTLM relay, and domain privilege escalation. Designed for security professionals to systematically map and exploit domain weaknesses.

Details comprehensive methods to maintain unauthorized access (persistence) on both Windows and Linux operating systems. Covers registry manipulation, scheduled tasks (schtasks), WMI event subscriptions, cron jobs, systemd timers, and advanced Active Directory abuses. Essential for authorized red team engagements and simulating advanced threat activity.

This skill provides an active penetration testing toolchain covering information gathering, port scanning, vulnerability scanning, web attacks (SQL injection, XSS), directory brute-forcing, and password cracking. It exposes 20+ security tools to AI agents via MCP servers for authorized security assessments.

Comprehensive reference for NetExec (nxc), a network exploitation and post-exploitation tool for Active Directory environments. Covers all protocols (SMB, LDAP, WinRM, etc.), authentication methods, password spraying, credential dumping, lateral movement, and module usage with practical command examples.