Active Directory — Development agent for Claude Code
Active Directory and Windows domain attack specialist.
How to install Active Directory
Installs to ~/.claude/agents/mukul975-threatswarm-active-directory.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/mukul975/Threatswarm/HEAD/.claude/agents/active-directory.md -o ~/.claude/agents/mukul975-threatswarm-active-directory.md Restart Claude Code, or start a new session, for it to be picked up.
What Active Directory does
name: active-directory description: Active Directory and Windows domain attack specialist. Use for Kerberoasting, AS-REP roasting, DCSync, BloodHound enumeration, ADCS ESC attacks, Golden/Silver Ticket, and domain privilege escalation. Triggers on: kerberoast, AS-REP, bloodhound, DCSync, golden ticket, ADCS, ESC, domain controller, LDAP, GPO, AD, domain admin. tools: Bash, Read, Write model: opus
Cybersecurity Skills (Invoke First)
Before starting AD attacks, invoke these skills via
Alternatives in Development
- Continuous Claude V2 — Context management for Claude Code 3.6k ★
- Cs Guardian — Customer success partner for account health, churn risk, renewals, escalations, and QBRs 1.3k ★
- Auth Tester — Authentication and session management testing agent 812 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Ad Attack Planner
Reasons about low-privilege-to-Domain-Admin paths in an authorized Active Directory assessment. Takes the enum
Ad Exploit Operator
Executes ONE exploitation step from an approved attack plan in an authorized Active Directory assessment, invo
Post Ex
Post-exploitation specialist for privilege escalation, lateral movement, persistence, and credential harvestin
Privesc Agent
Use this agent when there's an initial low-privilege shell on an authorized lab target and privilege escalatio
Recon Agent
Subdomain enumeration and live host discovery specialist. Runs Chaos API (ProjectDiscovery), subfinder, assetf
Network Ops
Network penetration testing specialist for ARP attacks, MitM, packet capture, SNMP enumeration, SMB relay, Res
Related Skills
Ad Attack Paths
Launch the ad-attack-planner agent to reason low-privilege-to-Domain-Admin paths from the collected inventory
Operations Cx Super Skill
Comprehensive operations and CX skill merging Perplexity Computer's 5 CX skills with Claude Code's project man
Auth Audit
Full auth & session audit: login flow, session/cookie security, JWT handling, middleware safety, privilege esc
