Home / Skills / abusing-shadow-credentials-for-privesc
abusing-shadow-credentials-for-privesc
mukul975/Anthropic-Cybersecurity-SkillsSkill
Take over Active Directory accounts by writing attacker-controlled public keys to msDS-KeyCredentialLink (Shadow Credentials) with pyWhisker, Whisker, or Certipy, then authenticate via PKINIT to recover the target's NT hash without a password reset. Use when BloodHound shows GenericWrite/GenericAll/AddKeyCredentialLink over a target, as a stealthier alternative to ForceChangePassword, during authorized red-team engagements.
Why this score
This repo hosts 10 skills, so its 34,722 stars are split between them (about 3,472 each) for scoring.
Popularity score: 81/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit 54a798831d22, with Cisco's open-source skill-scanner.
None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This oneabusing-shadow-credentials-for-privesc mukul975/Anthropic-Cybersecurity-Skills · Skill | 81 | ★ 35k | ≈117 always | 2mo ago |
| privesc-advisor 0xSteph/pentest-ai-agents · Subagent Both about privesc and authorized | 64 | ★ 2.4k | ≈64 in chat | 29d ago |
| windows-privesc-agent blacklanternsecurity/red-run · Subagent Both about privesc and red | 58 | ★ 291 | ≈25 in chat | 1mo ago |
| api-credentials oaustegard/claude-skills · Skill Both about credential and key | 60 | ★ 154 | ≈49 always | 20d ago |
| restore-credentials android/skills · Skill Both about credential | 79 | ★ 9.0k | ≈24 always | 16d ago |
| credentials smol-machines/smolvm · Skill Both about credential and key | 73 | ★ 6.8k | ≈153 always | 16d ago |