Active Directory Acl Abuse

This is a practical reference for exploiting misconfigured Active Directory permissions, covering the full chain from BloodHound enumeration through execution. It maps out dangerous ACEs like GenericAll, WriteDACL, and ForceChangePassword with specific commands for each scenario. You get concrete examples for DCSync attacks, shadow credentials via msDS-KeyCredentialLink manipulation, LAPS password extraction, and GPO abuse with SharpGPOAbuse. The ACE comparison table is genuinely useful for quickly determining what you can do with a given permission. Load this when you've found an exploitable ACL path and need the exact syntax to abuse it, whether you're working from Windows with PowerView or Linux with Impacket.

Install to Claude Code

npx -y skills add yaklang/hack-skills --skill active-directory-acl-abuse --agent claude-code