Use for authorized Active Directory and Windows identity attacks including Kerberos, AD CS, BloodHound paths, NTLM relay, and domain privilege escalation research.
Automate repetitive workflows and reduce manual effort
Example: Generate reports, summarize documents, draft communications
Save 3-5 hours per week on routine tasks
Learn new skills, understand complex topics, get expert guidance
Example: Explain concepts, provide examples, suggest learning resources
Accelerate learning and skill development by 2x
Enhance output quality through reviews, suggestions, and refinements
Example: Review drafts, suggest improvements, catch errors
Improve work quality by 30-40% with less effort
Time estimate: 15-45 minutes depending on use case complexity
Prerequisites
Submit your Claude Code skill and start earning
epx add zhaoxuya520/reverse-skill/skills/windows-adCompatible with
Supported agents
| name | windows-ad |
| description | Use for authorized Active Directory and Windows identity attacks including Kerberos, AD CS, BloodHound paths, NTLM relay, and domain privilege escalation research. |
NOW: 读取 ../field-journal/precedent-pentest.mdNOW: 域/AD 测试必须明确授权范围（含 DC、是否允许投毒/中继）NOW: case-init；network_profile 与禁止动作写清NEXT: tool-index（impacket/certipy/bloodhound 等常手动）ACT: 从身份枚举与 BloodHound 图开始，不先上破坏性利用attack-chain/，本 skill 为 AD 专科# 示例 Impacket / 内置（需凭据与授权）
nxc smb <range> -u user -p pass
bloodhound-python -d domain.local -u user -p pass -c All -ns <DC>
□ Kerberoast / AS-REP → 离线破解
□ ACL 滥用（GenericAll/WriteDacl）
□ 委派（非约束/约束/基于资源）
□ AD CS 模板错误 → Certipy
□ 中继：LLMNR/NBT-NS + ntlmrelayx（确认授权）
□ secretsdump / lsassy / mimikatz（严格授权与清理）
□ PtH / PtT / 黄金票仅在授权红队范围
□ 每步写 Evidence；高危等用户确认
| 工具 | 用途 |
|---|---|
| BloodHound / SharpHound | 路径图 |
| Certipy | AD CS |
| Impacket / NetExec | 横向与枚举 |
| Rubeus / Mimikatz | 票据与凭证（授权） |
| Coercer / Responder | 强制认证 / 投毒 |
references/ad-attack-paths.md../pentest-tools/references/network-attack-defense.md../attack-chain/field-journal/seed-005_ad-certipy-esc1.md seed-007_ntlm-relay-coercer.md seed-013_kerberoasting-spn.md上游: MASTER R24
下游: 报告 docs-generator；需 EDR 研究 edr-bypass-re
MUST NOT: 无授权 DCSync / 黄金票打生产
AI-first code editor with Composer
Before installing skills in Cursor, ensure your development environment meets these requirements:
node --versionwindows-adExecute the skills CLI command in your project's root directory to begin installation:
epx add zhaoxuya520/reverse-skill/skills/windows-adFetches windows-ad from zhaoxuya520/reverse-skill and configures it for Cursor.
The CLI shows a list of agents. Use arrow keys and space to select Cursor:
Confirm successful installation by checking the skill directory location:
.cursor/skills/windows-ad
Restart Cursor to activate windows-ad. Access via /windows-adin your agent's command palette.
Learn more:View source on GitHubSkills CLI docsAbout CursorWhat are agent skills?
Steps
Common Pitfalls
✓ Do
✗ Don't
💡 Pro Tips
✓ Use when
Use when skill capabilities match your task, clear ROI on time saved, and you can validate outputs. Best for repetitive tasks, learning, and quality improvement.
✗ Avoid when
Avoid when task requires deep expertise you can't validate, involves sensitive decisions, or when learning process is more valuable than speed of completion.
dotnet-reverse
zhaoxuya520/reverse-skill · security · same repo
reverse-engineering
zhaoxuya520/reverse-skill · security · same repo
radare2
zhaoxuya520/reverse-skill · security · same repo
patch-diff-exploit
zhaoxuya520/reverse-skill · security · same repo
protocol-reverse
zhaoxuya520/reverse-skill · security · same repo
firmware-pentest
zhaoxuya520/reverse-skill · security · same repo
Keeps context tight: windows-ad is the kind of skill you can hand to a new teammate without a long onboarding doc.
Solid pick for teams standardizing on skills: windows-ad is focused, and the summary matches what you get after install.
We added windows-ad from the explainx registry; install was straightforward and the SKILL.md answered most questions upfront.
We added windows-ad from the explainx registry; install was straightforward and the SKILL.md answered most questions upfront.
windows-ad has been reliable in day-to-day use. Documentation quality is above average for community skills.
Keeps context tight: windows-ad is the kind of skill you can hand to a new teammate without a long onboarding doc.
Solid pick for teams standardizing on skills: windows-ad is focused, and the summary matches what you get after install.
Keeps context tight: windows-ad is the kind of skill you can hand to a new teammate without a long onboarding doc.
windows-ad has been reliable in day-to-day use. Documentation quality is above average for community skills.
Registry listing for windows-ad matched our evaluation — installs cleanly and behaves as described in the markdown.
showing 1-10 of 55