Active Directory Attacks
Windows AD attacks: Kerberoasting, DCSync, pass-the-hash, Golden/Silver Ticket, BloodHound.
🛡️ AgentReady threat assessment
MAESTRO 7-layer threat model + OWASP AIVSS risk score for Active Directory Attacks, derived from its capabilities.
AIVSS 9.9 · Critical
View MAESTRO 7-layer threat model →Overview
An Agent Skill (author zebbern) for Active Directory penetration testing: Kerberoasting, AS-REP roasting, DCSync, pass-the-hash, NTLM relay, Golden/Silver Ticket forging, and BloodHound enumeration. It provides the agent a full Windows-domain attack playbook for authorized engagements.
Key features
- Kerberoasting and AS-REP roasting
- DCSync and pass-the-hash
- BloodHound enumeration and ticket forging
Use cases
- Attacking Windows domains
- AD privilege escalation