Is the AD Attacks Reference skill free?

Yes. The skill itself is free from mukul975/Threatswarm. SkillProof publishes the install command and an independent test verdict at no cost.

What is the AD Attacks Reference SkillProof Score?

8.0/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 5/10, docs & honesty 5/5.

How do I install AD Attacks Reference?

Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.

Can I use AD Attacks Reference with Cursor, Copilot, Gemini CLI, Codex or other AI tools?

The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.

AD Attacks Reference

Active Directory attack reference: BloodHound, Kerberos, ACL abuse, ADCS ESC1-8

by mukul975 · mukul975/Threatswarm

Works with setup

Install — copy the command Download source ↗

Test report

Verdict: Works with setup
Score: 8.0/10
Tested: Jul 17, 2026
Environment: Claude Code 2.x (agent harness)
Upstream re-checked: Aug 10, 2026 · ab8a17b

Accurate, well-organized cheatsheet — checked the Cypher property names (dontreqpreauth, hasspn), the ACE-to-exploit table, and the ESC1-8 certipy flows and they are correct and ready to paste. Scored unmeasured against baseline: exercising it needs a live AD domain plus impacket/certipy/BloodHound, so a delta over what the model already recalls could not be demonstrated.

Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works

Installs cleanly 5/5
Triggers reliably 5/5
Output vs. baseline 5/10
Docs & honesty 5/5

What AD Attacks Reference does

A copy-paste offensive Active Directory reference: BloodHound/Neo4j Cypher queries, a Kerberos attack decision tree, an ACE/ACL abuse table, ADCS ESC1-8 certipy commands, and a 20-item misconfig checklist. Loads when the user asks for AD attack paths, Kerberoasting/AS-REP queries, or domain privilege-escalation cheatsheets during a pentest.

How to install AD Attacks Reference

git clone https://github.com/mukul975/Threatswarm
mkdir -p ~/.claude/skills
cd Threatswarm && cp -r threatswarm-plugin/skills/ad-attacks ~/.claude/skills/ad-attacks

Skills live in ~/.claude/skills/ (global) or .claude/skills/ (per-project). Restart Claude Code after installing.

Commands — how to trigger AD Attacks Reference

/ad-attacks Active Directory attack reference: BloodHound, Kerberos, ACL abuse, ADCS ESC1-8

It also activates on plain-language prompts like these:

Give me the Cypher query for AS-REP roastable users to a DA path
What's the certipy sequence for an ADCS ESC1 escalation?
Walk me through Kerberoasting this domain during the pentest

Frequently asked questions

Is the AD Attacks Reference skill free?: Yes. The skill itself is free from mukul975/Threatswarm. SkillProof publishes the install command and an independent test verdict at no cost.
Does AD Attacks Reference work with Claude Code?: We tested it with Claude Code 2.x (agent harness) on Jul 17, 2026. Verdict: Works with setup. Accurate, well-organized cheatsheet — checked the Cypher property names (dontreqpreauth, hasspn), the ACE-to-exploit table, and the ESC1-8 certipy flows and they are correct and ready to paste. Scored unmeasured against baseline: exercising it needs a live AD domain plus impacket/certipy/BloodHound, so a delta over what the model already recalls could not be demonstrated.
What is the AD Attacks Reference SkillProof Score?: 8.0/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 5/10, docs & honesty 5/5.
How do I install AD Attacks Reference?: Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
Can I use AD Attacks Reference with Cursor, Copilot, Gemini CLI, Codex or other AI tools?: The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.