Ad Attack Paths — Development skill for Claude Code
Launch the ad-attack-planner agent to reason low-privilege-to-Domain-Admin paths from the collected inventory and BloodHound CE graph, then present the plan for human approval before any exploitation.
How to install Ad Attack Paths
Installs to ~/.claude/skills/adscanpro-claude-ad-ad-attack-paths/SKILL.md
mkdir -p ~/.claude/skills/adscanpro-claude-ad-ad-attack-paths && curl -fsSL https://raw.githubusercontent.com/ADScanPro/Claude-AD/HEAD/commands/ad-attack-paths.md -o ~/.claude/skills/adscanpro-claude-ad-ad-attack-paths/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Ad Attack Paths does
description: Launch the ad-attack-planner agent to reason low-privilege-to-Domain-Admin paths from the collected inventory and BloodHound CE graph, then present the plan for human approval before any exploitation. argument-hint: "" allowed-tools: Bash, Read, Write, Agent
Reason attack paths to Domain Admin for **$1**.
**Authorized engagements only.** This reads the inventory produced by `/ad-recon`. If no inventory exists under `./ad-engagement/`, tell the operator to run `/ad-
Alternatives in Development
- JWT Scan — JWT attack toolkit (offline) — alg:none forgery, RS256→HS256 algorithm confusion, weak-secret crack, static cl 4.5k ★
- /surface — View the prioritized attack surface for a target 1.8k ★
- Tentacle Planner — You are the Tentacle Planner — a meta-agent that analyzes this codebase and creates department tentacles to or 1.4k ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Ext Attack Paths
Launch the ext-attack-planner agent to reason from the enumerated exposures to likely footholds, then present
Ext Recon
Launch the ext-enumerator agent to run passive+active recon and service/web enumeration against the in-scope t
Ad Recon
Launch the ad-enumerator agent to run the collection phase against the defined scope, producing a structured A
Axguard Paths
Attack graph + vulnerability chaining (Phase 6). Chains Phase 1-5 findings into multi-hop attack paths. Usage:
Companion Collection
Save, list, or switch to a collected companion pet
Ctf Pwn
Solve pwn/binary exploitation CTF challenge: $ARGUMENTS
Related Agents
Ad Attack Planner
Reasons about low-privilege-to-Domain-Admin paths in an authorized Active Directory assessment. Takes the enum
Active Directory
Active Directory and Windows domain attack specialist. Use for Kerberoasting, AS-REP roasting, DCSync, BloodHo
Redteam Agent
Red Team penetration testing agent for HTB Expressway. Use when the user wants to attack or pentest the target
