Skill UI

A powerful offensive security toolkit for red-teaming and penetration testing. It systematically enumerates and exploits various misconfigurations within Active Directory Certificate Services (AD CS) using Certipy. This allows attackers to forge privileged certificates, perform PKINIT authentication, and achieve domain compromise and privilege escalation, even without knowing user passwords. Ideal for validating security hardening.

This skill enables comprehensive security graph mapping by ingesting both on-premises Active Directory data (via SharpHound) and cloud Entra ID data (via AzureHound) into BloodHound CE. It analyzes complex, hybrid attack paths, allowing security teams to identify critical privilege escalation chains from low-privileged accounts to Tier-0 assets, mapping findings to MITRE ATT&CK.

NetExec is a powerful, protocol-oriented tool for penetration testing, designed for assessing and exploiting Windows and Active Directory environments. It facilitates lateral movement by authenticating over protocols like SMB, WinRM, LDAP, and MSSQL. Key functions include password spraying, comprehensive network enumeration, command execution, and dumping critical credentials (SAM, LSA, NTDS) during post-exploitation phases.

This skill details the advanced red-teaming technique of exploiting Active Directory Certificate Services (AD CS) via the ESC8 path. By abusing the HTTP web-enrollment endpoint and relaying coerced NTLM credentials, an attacker can compel a domain controller to request a machine certificate. This certificate is then used to compromise the domain via PKINIT and DCSync.

This skill helps developers create highly focused, folder-specific documentation (`CLAUDE.md` and `AGENTS.md`). It systematically analyzes all files in a target directory to extract project purpose, operational constraints, naming conventions, and critical decisions. This deep context ensures that future AI agents (like Claude or Codex) operate with localized knowledge, preventing them from relying on global, generalized instructions and improving their accuracy in that specific domain.

This tool scaffolds a complete, canonical directory structure for creating new Claude Code plugins. It automatically generates necessary files like plugin.json, skill definitions (SKILL.md), command files, agent files, and comprehensive documentation (ADRs, README). Use it when you need to build a plugin that extends Claude Code's capabilities with custom skills, commands, and agents, ensuring adherence to the latest architectural standards.

This tool scaffolds a complete directory structure for a new Domain-Driven Design (DDD) Bounded Context. It automatically generates the standard layout, including `domain`, `application`, and `infrastructure` layers, and populates index files for clean module exports. Ideal for starting new microservices, splitting monoliths, or structuring fresh modules.

A comprehensive security auditing tool designed for Claude Code environments. It scans the entire configuration directory for security vulnerabilities, misconfigurations, injection risks, hardcoded secrets, and overly permissive settings. Ideal for initial project setup, pre-commit checks, or routine security hygiene.