Master AD ACL Abuse with AI: Lateral Movement & Escalation

Master AD ACL Abuse with AI: Lateral Movement & Escalation

Master AD ACL Abuse with AI is a technical skill package designed for AI coding agents like Claude Code, Cursor, and Codex. It empowers developers and IT security professionals to experiment with Active Directory object ACLs/DACLs, understanding how lateral movement and privilege escalation occur through rights such as GenericAll, WriteDACL, and others. This AI agent skill requires valid domain credentials and BloodHound to identify and utilize ACL edges for educational and security research purposes.

What this skill does

• Identifies over-permissive Active Directory Access Control Lists (ACLs) using BloodHound.
• Facilitates password resets on user accounts with ForceChangePassword rights through commands like net rpc password.
• Leverages GenericWrite and GenericAll rights to set Service Principal Names (SPNs) and conduct Kerberoasting, or to authenticate as a user via msDS-KeyCredentialLink manipulation.
• Supports group membership alterations through AddMember rights, permitting addition to privileged groups using commands like net group ... /add.
• Enables object ownership takeover via WriteDACL and WriteOwner rights, granting further permissions for privilege escalation.
• Assists with obtaining directory replication rights (DCSync) using GetChanges and GetChangesAll permissions.

Who it is for

This skill is intended for developers and IT security teams who utilize AI-based agents for automating tasks and conducting security research. It is particularly useful for professionals engaged in cybersecurity testing, including authorized penetration testers, security researchers, and educational purposes.

Use cases

• Simulating lateral movement and escalation scenarios in a controlled environment for security analysis.
• Enhancing security education through practical demonstrations of Active Directory vulnerability chaining.
• Developing AI applications that automatically detect and report on risky Active Directory permissions.

Technical details

• Supports integration with AI coding agents: Claude Code, Cursor, Codex.
• Requires BloodHound for identifying ACL edges and vulnerable permissions.
• Utilizes various command-line tools specific to Active Directory interaction and abuse scenarios.

For authorised security testing, defensive research, and educational use only.

Source & Licence

This package is built on open-source work published by NoorQureshi (NoorQureshi/security-skills) and distributed under MIT. The original licence text and copyright notice are included in your download.

Personal and commercial use, modification and redistribution are permitted, provided the original copyright and licence notice are retained.

Your purchase covers curation, licence verification, packaging, documentation and instant delivery. It does not grant exclusive rights to the underlying open-source code, which remains available under its original licence.

Delivery & Support

• Delivery: instant — a secure download link is emailed to you as soon as payment is confirmed.
• Format: ZIP archive containing the skill files, documentation and the original licence.
• Support: support@mcpcart.com — we aim to reply within 2 business days.
• Updates: updates are included only where stated on this page.

Refunds

This is a digital product delivered immediately after purchase. By completing your order you request immediate delivery and acknowledge that, once the download has been accessed, the statutory right to cancel no longer applies to the extent permitted by law. Refund requests are handled in accordance with our published Refund Policy.

Claude, Codex, Gemini and Cursor are trademarks of their respective owners. MCP Cart is an independent marketplace and is not affiliated with, endorsed by, or sponsored by any of them. Compatibility references describe interoperability only.