hunt-ad
Encod3d-Sec/TORCHSkill
Active Directory attack hunting - enumeration to domain dominance. Spray-safe (lockout gate), AS-REP/Kerberoast, ACL + ADCS (ESC1-16), delegation, DCSync, lateral movement. Wiki-first, FIND schema output.
Why this score
This repo hosts 10 skills, so its 333 stars are split between them (about 33 each) for scoring.
Popularity score: 59/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit d21b6c94982c, with Cisco's open-source skill-scanner.
None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This onehunt-ad Encod3d-Sec/TORCH · Skill | 59 | ★ 333 | ≈53 always | 2mo ago |
| hunt tw93/Waza · Skill Both about hunt and find | 77 | ★ 7.3k | ≈35 always | 17d ago |
| ad-security CyberStrikeus/CyberStrike · Skill Both about ad and attack | 71 | ★ 3.2k | ≈17 always | 21d ago |
| hunt-comments dealfluence/adeu · Skill Both about hunt and hunting | 65 | ★ 168 | ≈34 always | 17d ago |
| bloodhound-ad-analysis SpecterOps/skills · Skill Both about ad and dcsync | 67 | ★ 718 | ≈149 always | 21d ago |
| ad-methodology ADScanPro/Claude-AD · Skill Both about ad and active | 58 | ★ 212 | ≈25 always | 2mo ago |