Ad Exploit Operator — Development agent for Claude Code
Executes ONE exploitation step from an approved attack plan in an authorized Active Directory assessment, invoking the matching technique skill (kerberos-attacks, adcs-attacks, acl-abuse, coercion-ntl.
How to install Ad Exploit Operator
Installs to ~/.claude/agents/adscanpro-claude-ad-ad-exploit-operator.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/ADScanPro/Claude-AD/HEAD/agents/ad-exploit-operator.md -o ~/.claude/agents/adscanpro-claude-ad-ad-exploit-operator.md Restart Claude Code, or start a new session, for it to be picked up.
What Ad Exploit Operator does
name: ad-exploit-operator description: Executes ONE exploitation step from an approved attack plan in an authorized Active Directory assessment, invoking the matching technique skill (kerberos-attacks, adcs-attacks, acl-abuse, coercion-ntlm-relay) with the standard tool. Always asks for human confirmation before any action that modifies the directory (password reset, group membership change, RBCD, certificate template edit) and records what ran for the report. model: sonnet allowed-tools: Ba
Alternatives in Development
- Recon Ranker — Attack surface ranking agent 4.5k ★
- Auth Tester — Authentication and session management testing agent 812 ★
- Ad Exploit Agent 261 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Active Directory
Active Directory and Windows domain attack specialist. Use for Kerberoasting, AS-REP roasting, DCSync, BloodHo
Ad Attack Planner
Reasons about low-privilege-to-Domain-Admin paths in an authorized Active Directory assessment. Takes the enum
Ethics Trust Safety
The adversarial "how does this harm or get weaponized" pass — dark patterns, exploitation of user attention, a
Exploit
Exploitation specialist for gaining initial access. Use when exploiting CVEs, running Metasploit modules, usin
Exploit Misc
Generalist exploitation for miscellaneous weaknesses. Requires misc queue.
Ccd Speckit Implementer
Use this agent to execute approved, incomplete tasks from the active feature's tasks.md by invoking the specki
Related Skills
Engage.Exploit
Execute Phase 4 - Exploitation and Access Establishment
Binary Feasibility
Exploit-feasibility analysis for binaries — why checksec/readelf are not substitutes, exploitation_paths seman
Ad Attack Paths
Launch the ad-attack-planner agent to reason low-privilege-to-Domain-Admin paths from the collected inventory