windows-ad
ZHFind attack paths in your Windows domain.
What it does
Guides authorized Windows and Active Directory security assessments to identify identity attack paths.
When to use it
Use for domain penetration testing involving Kerberos, AD CS, BloodHound attack paths, NTLM relay, or local-to-domain privilege escalation.
How to use it
Give it an explicitly authorized domain-testing scope; it guides attack-path assessment and records evidence for reporting, asking before high-risk steps.
What you provide
- the authorized domain-testing scope
Uses
What you need · 4
The identity-focused workflow operates within an existing domain and requires an explicitly authorized testing scope, including domain controllers.
The workflow instructs the agent to begin with identity enumeration and a BloodHound graph.
The enumeration examples require credentials and authorization; the files do not specify where credentials are obtained.
Access · 1
This skill
Active Directory
Enumerates domain identities