Automation

Machinist creates, assigns, monitors, and resumes software tasks from GitHub issues. Use it when an agent needs to start, continue, or review work in Machinist's direct or managed queue flow.

Machinist turns a GitHub issue into a planned, implemented, reviewed, and verified pull request. Use it to create tasks, assign or resume work, and manage lifecycle labels in its issue-based workflow.

Dirty Pixels重画输入图片为黑底像素粒子画，并可输出静态PNG或无缝循环GIF/MP4。适合把照片或插画转换成带流动笔触和尘化质感的粒子风格。

Apple Tools reaches Calendar, Contacts, Reminders, Messages, Location, Maps, and Weather data on macOS through iMCP and pi-mcp-adapter. Use it to read or search Apple personal data; it does not cover Apple Mail.

KB Setup brings up a local markdown knowledge base for a project. Use it to initialize or configure sources, index docs, and verify search works with a smoke query.

Acl Abuse exploits misconfigured Active Directory ACLs for privilege escalation. It is used to abuse rights like GenericAll, WriteDACL, shadow credentials, SPN manipulation, and password reset paths.

Ad Discovery enumerates Active Directory domains to map hosts, signing settings, and attack paths during authorized testing. It supports unauthenticated and credentialed reconnaissance and records findings for orchestration.

AD Persistence documents post-compromise techniques for maintaining access in Active Directory after domain admin access. It covers methods like DCShadow, Golden SAML, SID history, certificate persistence, and security descriptor backdoors.

GPO Abuse helps test writable Group Policy Objects for code execution, privilege escalation, and lateral movement in Active Directory. It covers GPO enumeration, immediate tasks, logon script poisoning, registry changes, and GPP password extraction.

Infrastructure Enumeration checks exposed DNS, SMTP, RPC/MSRPC, LDAP, NFS, SNMP, IPMI, TFTP, and HTTP/HTTPS services for common misconfigurations and information leaks. Use it after network recon identifies open infrastructure ports.

Kerberos Roasting extracts Kerberoastable TGS tickets and AS-REP hashes for offline password cracking. Use it during authorized Active Directory assessments when you have domain credentials or username lists.

Kerberos Ticket Forging for forging Golden, Silver, Diamond, Sapphire, and pass-the-ticket Kerberos tickets during authorized red team testing. Use it when you have domain or service key material and need Kerberos-based persistence or privilege escalation.