# ad

> Active Directory attack chain. Use for AD environments, domain attacks, Kerberoasting, DCSync, or lateral movement in Windows domains.

- Author: Monopoly CW
- Repository: veil-protocol/usf-7
- Version: 20260125012158
- Stars: 1
- Forks: 0
- Last Updated: 2026-02-06
- Source: https://github.com/veil-protocol/usf-7
- Web: https://mule.run/skillshub/@@veil-protocol/usf-7~ad:20260125012158

---

---
name: ad
description: Active Directory attack chain. Use for AD environments, domain attacks, Kerberoasting, DCSync, or lateral movement in Windows domains.
argument-hint: <domain-controller-or-domain>
---

# Active Directory Attack

Attack AD environment: $ARGUMENTS

## Attack Phases

1. **Enumeration** - BloodHound, LDAP queries
2. **Initial Access** - AS-REP Roast, Password Spray
3. **Privilege Escalation** - Kerberoasting, Delegation abuse
4. **Lateral Movement** - Pass-the-Hash, Overpass-the-Hash
5. **Domain Compromise** - DCSync, Golden Ticket

## Execution

1. **AD Recon**
```
mcp__omega-nexus__omega_recon(target="$ARGUMENTS", scan_type="default")
```

2. **Research AD techniques**
```
mcp__omega-nexus__omega_vault_query(
    query="active directory attack kerberoasting dcsync",
    context="security"
)
```

3. **Execute AD attacks**
```
mcp__omega-nexus__omega_exploit(
    target="$ARGUMENTS",
    exploit_type="ad_initial",
    options={"techniques": ["asreproast", "kerberoast", "password_spray"]}
)
```

4. **Post-exploitation**
```
mcp__omega-nexus__omega_post_exploit(session_id=<session>)
```

## Output

Report AD attack progress and any credentials/hashes obtained.