Skill UI

Connects to a Domain Controller via ldap3, parses nTSecurityDescriptor data into SDDL, and highlights GenericAll/WriteDACL/WriteOwner abuse to help analysts detect privilege escalation paths.

Exploit the noPac CVE-2021-42278/42287 chain to escalate from a standard Active Directory user to Domain Admin in red-team or lab settings, covering scanning, sAMAccountName spoofing, Kerberos PAC confusion, and DCSync with the obtained DC ticket.

Use BloodHound with SharpHound or AzureHound to enumerate Active Directory relationships, surface attack paths, and visualize privilege escalation from compromised users to Domain Admin; ideal for red-team assessments, incident response, and control validation.

Guide to conducting focused Active Directory penetration tests: enumerate domain objects, map attack paths with BloodHound, exploit Kerberos, abuse ADCS/DCSync, and demonstrate privilege escalation to domain compromise for security assessments and incident response.