acl-abuse
ADScanPro/Claude-ADSkill
Abusing Active Directory object ACLs (DACL/ownership) for privilege escalation and lateral movement (GenericAll, GenericWrite, WriteDACL, WriteOwner, AddMember, ForceChangePassword, and replication rights via DS-Replication-Get-Changes-All). Use when BloodHound CE shows an outbound control edge from a principal you own toward a higher-value object, and you want the exact bloodyAD/impacket command to weaponize that ACE, plus detection and remediation. DCSync is covered here strictly as a post-compromise technique, not a user entry path.
Why this score
This repo hosts 8 skills, so its 212 stars are split between them (about 27 each) for scoring.
Popularity score: 58/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit 73efec51207f, with Cisco's open-source skill-scanner.
None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This oneacl-abuse ADScanPro/Claude-AD · Skill | 58 | ★ 212 | ≈138 always | 2mo ago |
| active-directory-acl-abuse yaklang/hack-skills · Skill Both about acl and abuse | 69 | ★ 2.5k | ≈60 always | 2mo ago |
| analyzing-active-directory-acl-abuse mukul975/Anthropic-Cybersecurity-Skills · Skill Both about acl and abuse | 81 | ★ 35k | ≈27 always | 2mo ago |
| competition-ad-certificate-abuse zhaoxuya520/reverse-skill · Skill Both about abuse and ad | 82 | ★ 43k | ≈139 always | 1mo ago |
| offensive-api-abuse SnailSploit/Claude-Red · Skill Both about abuse and force | 79 | ★ 7.6k | ≈155 always | 23d ago |