Ad Attack Planner — Development agent for Claude Code
Reasons about low-privilege-to-Domain-Admin paths in an authorized Active Directory assessment.
How to install Ad Attack Planner
Installs to ~/.claude/agents/adscanpro-claude-ad-ad-attack-planner.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/ADScanPro/Claude-AD/HEAD/agents/ad-attack-planner.md -o ~/.claude/agents/adscanpro-claude-ad-ad-attack-planner.md Restart Claude Code, or start a new session, for it to be picked up.
What Ad Attack Planner does
name: ad-attack-planner description: Reasons about low-privilege-to-Domain-Admin paths in an authorized Active Directory assessment. Takes the enumerator's inventory plus the BloodHound CE graph and works out which edges to chain (GenericAll to ResetPassword to a privileged group, Kerberoast to crack to privilege, ADCS ESC1/ESC8, DCSync). It plans and explains; it never executes. Presents the path for human confirmation before any exploitation begins. model: sonnet allowed-tools: Bash, Read,
Alternatives in Development
- Auth Tester — Authentication and session management testing agent 812 ★
- .github/workflows/redteam.yml — name: Continuous Red Team Assessment on: push: branches: [main, develop] pull_request: branches: [main] schedu 213 ★
- Finding Linker — Compares new findings against a shortlist of existing findings in the vault and proposes typed edges (supports 95 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Ad Enumerator
Runs the COLLECTION phase of an authorized Active Directory assessment from a low-privilege domain account. Or
Active Directory
Active Directory and Windows domain attack specialist. Use for Kerberoasting, AS-REP roasting, DCSync, BloodHo
Ad Exploit Operator
Executes ONE exploitation step from an approved attack plan in an authorized Active Directory assessment, invo
Privesc Agent
Use this agent when there's an initial low-privilege shell on an authorized lab target and privilege escalatio
Ad User Admin
Active Directory user administration — look up users, read attributes and password-expiry, and perform attribu
Vlm Workflow Reviewer
Review a shrug-prompter node chain (either a ComfyUI workflow JSON, a Python graph description, or an ASCII di
Related Skills
Ad Attack Paths
Launch the ad-attack-planner agent to reason low-privilege-to-Domain-Admin paths from the collected inventory
Ext Recon
Launch the ext-enumerator agent to run passive+active recon and service/web enumeration against the in-scope t
0x002132 Skills Bugbounty Cloud Iam Deep
Cloud IAM red-team attack chain across AWS, Azure, GCP — focused on EXTERNAL exploitation paths and post-crede
