Review Active Directory permissions with ldap3, a Python library for directory queries. Identify excessive access granted to non-administrative accounts, explain potential privilege escalation paths, and produce a JSON report with affected objects and remediation recommendations.
中文简介正在准备中。当前显示英语简介。
- Auditing excessive Active Directory permissions
- Investigating privilege escalation paths from ordinary accounts
- Reporting affected objects and permission remediation recommendations
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Active Directory ACL 滥用攻击方法论。当 BloodHound 发现 GenericAll/WriteDACL/WriteOwner/GenericWrite/ForceChangePassword 等危险 ACE 时使用。覆盖 ACE 枚举、权限滥用链、Shadow Credentials、RBCD 攻击
中文简介正在准备中。当前显示原文说明。
aibot88/sec_skill_store☆ 52026年5月27日 更新
Assess Shadow Credentials account takeover during authorized Active Directory testing. Examine permissions that allow public key registration, validate authentication without a password reset, and document credential cleanup, detection opportunities, and access control changes needed for remediation.
中文简介正在准备中。当前显示英语简介。
- Assessing risky permissions identified in BloodHound
- Validating account takeover without resetting a password
- Generating directory change records during security exercises
mukul975/Anthropic-Cybersecurity-Skills☆ 3.5万2026年8月31日 更新
Design principles and creative direction for building HTML artifacts — pages, reports, plans, landing pages, demos, decks, and small tools. Use when creating or restyling any visual HTML deliverable and deciding its palette, type pairing, layout, theming, or overall register, or when the output must not look generically AI-generated.
中文简介正在准备中。当前显示原文说明。
plannotator/effective-html☆ 36892026年10月16日 更新
Active Directory ACL abuse playbook. Use when exploiting misconfigured AD permissions including GenericAll, WriteDACL, DCSync rights, shadow credentials, LAPS reading, GPO abuse, and BloodHound-guided attack paths.
中文简介正在准备中。当前显示原文说明。
yaklang/hack-skills☆ 25072026年9月13日 更新
How to capture new reusable patterns into ktx's semantic layer - when a measure, segment, or join belongs in the catalog and how to write it generically so it stays small and useful over time. Loaded by the post-turn memory-agent only. The research agent does not write to the SL.
中文简介正在准备中。当前显示原文说明。
Kaelio/ktx☆ 16182026年10月17日 更新
Abusing Active Directory object ACLs (DACL/ownership) for privilege escalation and lateral movement (GenericAll, GenericWrite, WriteDACL, WriteOwner, AddMember, ForceChangePassword, and replication rights via DS-Replication-Get-Changes-All). Use when BloodHound CE shows an outbound control edge from a principal you own toward a higher-value object, and you want the exact bloodyAD/impacket command to weaponize that ACE, plus detection and remediation. DCSync is covered here strictly as a post-compromise technique, not a user entry path.
中文简介正在准备中。当前显示原文说明。
ADScanPro/Claude-AD☆ 2122026年8月25日 更新
Active Directory ACL abuse playbook. Use when exploiting misconfigured AD permissions including GenericAll, WriteDACL, DCSync rights, shadow credentials, LAPS reading, GPO abuse, and BloodHound-guided attack paths.
中文简介正在准备中。当前显示原文说明。
ShulkwiSEC/bb-huge☆ 232026年7月11日 更新
Short alias for universal-web-adaptation. Use this when adapting an unfamiliar public website generically before creating any site-specific rules.
中文简介正在准备中。当前显示原文说明。
gabrielmoreira/agent-skills-mirror☆ 192026年10月18日 更新
Shortest English alias for web-adapt / universal-web-adaptation. Use this when adapting an unfamiliar public website generically before creating any site-specific rules.
中文简介正在准备中。当前显示原文说明。
gabrielmoreira/agent-skills-mirror☆ 192026年10月18日 更新
Use this skill when asked to work with an unfamiliar public website and the goal is to make progress generically before writing site-specific rules. It teaches Copilot how to probe controls, classify UI patterns, try multiple search and navigation strategies, follow popups, and only create a site profile when the generic approach is no longer sufficient.
中文简介正在准备中。当前显示原文说明。
gabrielmoreira/agent-skills-mirror☆ 192026年10月18日 更新
Detect dangerous ACL misconfigurations in Active Directory using ldap3 to identify GenericAll, WriteDACL, and WriteOwner abuse paths
中文简介正在准备中。当前显示原文说明。
andycungkrinx91/konoha☆ 92026年10月19日 更新
Entry-point router skill for the 1Password CLI. Use this skill when the user mentions the 1Password CLI (`op`) or 1Password generically, references the secret-reference URI scheme `op://`, asks about `OP_ACCOUNT` or `OP_SERVICE_ACCOUNT_TOKEN`, asks about biometric unlock for a CLI, or is choosing how to load secrets into an app and 1Password is a candidate. Provides general orientation, the auth-mode picker, the full command map, and routing to deeper sub-skills (`op-secrets-injection`, `op-item-management`, `op-provisioning`, `op-ssh-keys`, `op-shell-plugins`, `op-service-accounts`). Defer to those sub-skills for specific commands.
中文简介正在准备中。当前显示原文说明。
aibot88/sec_skill_store☆ 52026年5月27日 更新
Detect dangerous ACL misconfigurations in Active Directory using ldap3 to identify GenericAll, WriteDACL, and WriteOwner abuse paths
中文简介正在准备中。当前显示原文说明。
micsapp/micstec-skills☆ 42026年3月20日 更新
Detect dangerous ACL misconfigurations in Active Directory using ldap3 to identify GenericAll, WriteDACL, and WriteOwner abuse paths
中文简介正在准备中。当前显示原文说明。
aniket2348823/Vul-Agent☆ 22026年6月9日 更新