Master Active Directory ACLs for Privilege Escalation in AI

Master Active Directory ACLs for Privilege Escalation in AI

This AI agent skill focuses on leveraging Active Directory object Access Control Lists (ACLs) for privilege escalation and lateral movement within an IT environment. It facilitates the conversion of outbound control paths, identified by BloodHound CE, into actionable commands using the bloodyAD and impacket tools. This skill does not address initial access but rather aids in post-compromise privilege enhancement.

What this skill does

• Identifies and leverages misconfigured Active Directory ACLs, like `GenericAll` or `WriteDacl`, to escalate privileges using specific commands.
• Uses BloodHound CE to map control paths and visualize potential privilege escalation routes.
• Transforms identified paths into concrete actions via bloodyAD and impacket for targeted privilege elevation techniques.
• Covers post-compromise techniques, notably DCSync, strictly for defensive research.

Who it is for

• Developers working with AI coding agents such as Claude Code, Cursor, or Codex.
• Security researchers and IT security personnel focusing on Active Directory environments.
• Teams conducting authorised security testing and defensive research.

Use cases

• Analyzing control edges in Active Directory for potential privilege escalation opportunities.
• Integrating privilege escalation techniques into defensive security research projects.
• Supporting educational activities around post-compromise security assessments.

Technical details

• Utilizes BloodHound CE for identifying and visualizing outbound control paths in Active Directory.
• Employs bloodyAD and impacket for executing privilege escalation through misconfigured ACLs.
• Requires user action to identify paths with pre-built queries in BloodHound CE.

For authorised security testing, defensive research and educational use only.

Source & Licence

This package is built on open-source work published by ADScanPro (ADScanPro/Claude-AD) and distributed under MIT. The original licence text and copyright notice are included in your download.

Personal and commercial use, modification and redistribution are permitted, provided the original copyright and licence notice are retained.

Your purchase covers curation, licence verification, packaging, documentation and instant delivery. It does not grant exclusive rights to the underlying open-source code, which remains available under its original licence.

Delivery & Support

• Delivery: instant — a secure download link is emailed to you as soon as payment is confirmed.
• Format: ZIP archive containing the skill files, documentation and the original licence.
• Support: support@mcpcart.com — we aim to reply within 2 business days.
• Updates: updates are included only where stated on this page.

Refunds

This is a digital product delivered immediately after purchase. By completing your order you request immediate delivery and acknowledge that, once the download has been accessed, the statutory right to cancel no longer applies to the extent permitted by law. Refund requests are handled in accordance with our published Refund Policy.

Claude, Codex, Gemini and Cursor are trademarks of their respective owners. MCP Cart is an independent marketplace and is not affiliated with, endorsed by, or sponsored by any of them. Compatibility references describe interoperability only.