h3nr1-d14z

Ad Enum — Development skill for Claude Code

Development community

Active Directory enumeration on: $ARGUMENTS.

How to install Ad Enum

Installs to ~/.claude/commands/h3nr1-d14z-ai-redteam-toolkit-ad-enum.md

Terminal
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/h3nr1-d14z/ai-redteam-toolkit/HEAD/.claude/commands/ad-enum.md -o ~/.claude/commands/h3nr1-d14z-ai-redteam-toolkit-ad-enum.md

Restart Claude Code, or start a new session, for it to be picked up.

What Ad Enum does

Active Directory enumeration on: $ARGUMENTS

Pre-flight

  • Confirm AD environment is in scope for enumeration
  • Determine access level: unauthenticated, low-privilege domain user, or admin
  • Identify Domain Controller IP(s) and domain name
  • Verify network connectivity to DC (ports 88, 389, 445, 636)

Phase 1: Unauthenticated Enumeration

  1. Kerbrute user enum: kerbrute userenum -d --dc users.txt
  2. Null session SMB: crackmapexec smb --shares -u '' -p ''

Alternatives in Development

Full documentation available on GitHub

View Source Repository