domains / families / security / active-directory-acl-abuse

active-directory-acl-abuse

separate

Active Directory ACL abuse playbook. Use when exploiting misconfigured AD permissions including GenericAll, WriteDACL, DCSync rights, shadow credentials, LAPS reading, GPO abuse, and BloodHound-guided attack paths.

When to use

BloodHound enumeration
Exploiting dangerous ACEs
DCSync attacks
Shadow credentials
Targeted kerberoasting
Group manipulation
LAPS reading
GPO abuse

Skill page

Source

Repository	Path
yaklang/hack-skills	`skills/active-directory-acl-abuse/SKILL.md`