Active Directory Attacks

Warn

Audited by Socket on Feb 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This artifact is an explicit, high-fidelity offensive playbook for compromising Active Directory environments. It contains actionable, step-by-step commands for credential harvesting (Mimikatz, DCSync, secretsdump), Kerberos ticket manipulation (kerberoast, AS-REP roast, Golden/Silver tickets), NTLM relay attacks, and exploitation of critical DC vulnerabilities (ZeroLogon, PrintNightmare). The document itself is not obfuscated and does not embed malicious binaries or external callbacks, but it provides direct instructions that enable complete domain compromise and persistent backdoors if used without strict authorization and operational controls. Distribution should be restricted to authorized red-team operators and accompanied by strong procedural safeguards (approval, logging, artifact handling, secure deletion).

Confidence: 75%Severity: 90%
Audit Metadata
Analyzed At
Feb 16, 2026, 12:57 PM
Package URL
pkg:socket/skills-sh/automindtechnologie-jpg%2Fultimate-skill.md%2Factive-directory-attacks%2F@c0b80ef396a7e8f99d24cfdae041753f0c0a4644