Download

Skill UI

Browse and discover 5973+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Kerberos , found 15 results

Default Newest Most Downloaded

Active Directory Attack Playbook

active-directory-attacks

sickn33/antigravity-awesome-skills

Compilation of red-team techniques for penetrating Microsoft Active Directory, covering reconnaissance with BloodHound/PowerView, credential harvesting, Kerberos ticket abuse, NTLM relays, and AD CS exploits to gain domain dominance.

Pass-the-Ticket Attack

conducting-pass-the-ticket-attack

mukul975/Anthropic-Cybersecurity-Skills

Guides red-teamers through extracting Kerberos tickets from LSASS, exporting and injecting them to impersonate users, and using those stolen tickets for lateral movement in compromised environments.

Detect Golden Ticket Attacks

detecting-golden-ticket-attacks

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Windows Security EVTX logs to detect Kerberos golden ticket assaults by correlating event IDs 4768, 4624, and 4672, flagging long-lived TGTs, privilege escalations without group changes, SID inconsistencies, and outputting a timeline-based report.

Kerberos Golden Ticket Detection

detecting-golden-ticket-attacks-in-kerberos-logs

mukul975/Anthropic-Cybersecurity-Skills

Analyze domain controller Kerberos logs to spot Golden Ticket TGT anomalies such as RC4 encryption, impossible lifetimes, missing TGT requests, and forged PAC signatures, letting SOC teams hunt credential abuse and persistent AD footholds with Splunk or KQL queries.

Golden Ticket Detection

detecting-golden-ticket-forgery

mukul975/Anthropic-Cybersecurity-Skills

Detect Kerberos Golden Ticket forgery by analyzing Windows Event IDs 4768/4769 for RC4 downgrades, ticket lifetime violations, and krbtgt anomalies across Splunk or Elastic SIEM, producing risk-scored JSON reports tied to MITRE ATT&CK mapping.

Detecting Pass-The-Ticket

detecting-pass-the-ticket-attacks

mukul975/Anthropic-Cybersecurity-Skills

Analyze Windows Event IDs 4768, 4769, and 4771 within Splunk or Elastic SIEM to identify anomalous Kerberos ticket usage, RC4 downgrades, and unusual service requests, enabling proactive Pass-the-Ticket threat detection.

Active Directory Attack Simulation

executing-active-directory-attack-simulation

mukul975/Anthropic-Cybersecurity-Skills

Simulates authorized Active Directory attack paths using BloodHound, Mimikatz, Impacket and related tools to surface misconfigurations, weak credentials, Kerberos flaws and privilege paths before adversaries exploit them; ideal for AD pentests, SOC/EDR validation, and privilege escalation resistance checks.

Kerberos Constrained Delegation Abuse

exploiting-constrained-delegation-abuse

mukul975/Anthropic-Cybersecurity-Skills

Documented methodology for finding Active Directory accounts with constrained delegation and abusing their S4U2self/S4U2proxy flows via Rubeus or Impacket to impersonate privileged users, steal service tickets, and extend lateral movement in red-team engagements.

Impacket Kerberoasting Guide

exploiting-kerberoasting-with-impacket

mukul975/Anthropic-Cybersecurity-Skills

Detailed walkthrough for using Impacket's GetUserSPNs.py to enumerate service accounts, request Kerberos TGS tickets, export hashes, and crack them offline as part of a Kerberoasting red-team campaign against Active Directory.

NoPac Domain Admin Escalation

exploiting-nopac-cve-2021-42278-42287

mukul975/Anthropic-Cybersecurity-Skills

Walks through exploiting the noPac CVE-2021-42278/42287 chain to escalate from a standard Active Directory user to Domain Admin by spoofing machine accounts, confusing Kerberos PAC validation, and running DCSync with domain controller tickets.

Credential Extraction Memory Dump

extracting-credentials-from-memory-dump

mukul975/Anthropic-Cybersecurity-Skills

Use Volatility, Mimikatz, and pypykatz to recover cached credentials, hashes, and Kerberos tickets from Windows memory dumps for incident response, breach scope analysis, and forensic investigations.

Active Directory Investigation

performing-active-directory-compromise-investigation

mukul975/Anthropic-Cybersecurity-Skills

Investigate Active Directory breaches by analyzing authentication logs, Kerberos anomalies, NTDS.dit integrity, Group Policy changes, and privileged group edits to uncover persistence and lateral movement paths.

Language