ad-discovery

What problem does it solve?

This Skill helps penetration testers discover and map the attack surface within an Active Directory environment, identifying potential vulnerabilities and pathways for lateral movement.

Core Features & Use Cases

• Comprehensive Enumeration: Gathers information on domain controllers, users, groups, and computer accounts.
• Vulnerability Identification: Detects misconfigurations like unconstrained delegation, vulnerable ADCS templates, and SMB signing issues.
• Attack Path Mapping: Utilizes tools like BloodHound to visualize relationships and find paths to privileged accounts.
• Use Case: A penetration tester needs to understand the Active Directory environment of a target organization to identify the quickest way to gain domain administrator privileges.

Quick Start

Use the ad-discovery skill to enumerate all domain controllers and identify Kerberoastable accounts in the 'contoso.local' domain.