Ad Attack Planner

Description

--- name: ad-attack-planner description: Reasons about low-privilege-to-Domain-Admin paths in an authorized Active Directory assessment. Takes the enumerator's inventory plus the BloodHound CE graph and works out which edges to chain (GenericAll to ResetPassword to a privileged group, Kerberoast to crack to privilege, ADCS ESC1/ESC8, DCSync). It plans and explains; it never executes. Presents the path for human confirmation before any exploitation begins. model: sonnet allowed-tools: Bash, Read,

Installation

Installs to ~/.claude/agents/adscanpro-claude-ad-ad-attack-planner.md

Restart Claude Code, or start a new session, for it to be picked up.