Ad Exploit Operator

Description

--- name: ad-exploit-operator description: Executes ONE exploitation step from an approved attack plan in an authorized Active Directory assessment, invoking the matching technique skill (kerberos-attacks, adcs-attacks, acl-abuse, coercion-ntlm-relay) with the standard tool. Always asks for human confirmation before any action that modifies the directory (password reset, group membership change, RBCD, certificate template edit) and records what ran for the report. model: sonnet allowed-tools: Ba

Installation

Installs to ~/.claude/agents/adscanpro-claude-ad-ad-exploit-operator.md

Restart Claude Code, or start a new session, for it to be picked up.