Ad Enum

Description

Active Directory enumeration on: $ARGUMENTS ## Pre-flight - Confirm AD environment is in scope for enumeration - Determine access level: unauthenticated, low-privilege domain user, or admin - Identify Domain Controller IP(s) and domain name - Verify network connectivity to DC (ports 88, 389, 445, 636) ## Phase 1: Unauthenticated Enumeration 1. **Kerbrute user enum**: `kerbrute userenum -d <domain> --dc <dc-ip> users.txt` 2. **Null session SMB**: `crackmapexec smb <dc-ip> --shares -u '' -p ''`

Installation

Installs to ~/.claude/commands/h3nr1-d14z-ai-redteam-toolkit-ad-enum.md

Restart Claude Code, or start a new session, for it to be picked up.