Skill UI

Connects to a Domain Controller via ldap3, parses nTSecurityDescriptor data into SDDL, and highlights GenericAll/WriteDACL/WriteOwner abuse to help analysts detect privilege escalation paths.

Exploit the noPac CVE-2021-42278/42287 chain to escalate from a standard Active Directory user to Domain Admin in red-team or lab settings, covering scanning, sAMAccountName spoofing, Kerberos PAC confusion, and DCSync with the obtained DC ticket.

Guide to conducting focused Active Directory penetration tests: enumerate domain objects, map attack paths with BloodHound, exploit Kerberos, abuse ADCS/DCSync, and demonstrate privilege escalation to domain compromise for security assessments and incident response.