Analyzing Active Directory ACL Abuse

Analyzing Active Directory ACL Abuse is a DevOps skill for Claude Code, published by mukul975 in Anthropic-Cybersecurity-Skills.

27.8K stars3.4K forkson mukul975/Anthropic-Cybersecurity-SkillsAdded 2026/08/14Repository updated 2026/08/08

View source on GitHub Download repo ZIP

ai-agentsclaude-codecloud-securitycybersecuritydevsecopsethical-hackingincident-responseinfosecllmmalware-analysismcpmitre-attacknist-csfosintpenetration-testingred-teamsecuritysecurity-automationthreat-huntingthreat-intelligence

Install in seconds

Install Analyzing Active Directory ACL Abuse

Copy Analyzing Active Directory ACL Abuse into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/main/skills/analyzing-active-directory-acl-abuse ~/.claude/skills/analyzing-active-directory-acl-abuse

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: skills/analyzing-active-directory-acl-abuse/SKILL.md in mukul975/Anthropic-Cybersecurity-Skills
Installs to: ~/.claude/skills/analyzing-active-directory-acl-abuse
Collection: One of 25 skills cataloged from this repository
Category: DevOps — 798 skills

What Analyzing Active Directory ACL Abuse does

Analyzing Active Directory ACL Abuse connects to a domain controller via ldap3 to parse security descriptors and detect dangerous ACL misconfigurations that enable attacks like privilege escalation.

Analyzing Active Directory ACL Abuse is cataloged under DevOps on DirSkills. Analyzing Active Directory ACL Abuse comes from a repository tagged ai-agents, claude-code, cloud-security, cybersecurity and devsecops.

Documentation

README

Excerpt

Analyzing Active Directory ACL Abuse

Overview

Active Directory Access Control Lists (ACLs) define permissions on AD objects through Discretionary Access Control Lists (DACLs) containing Access Control Entries (ACEs). Misconfigured ACEs can grant non-privileged users dangerous permissions such as GenericAll (full control), WriteDACL (modify permissions), WriteOwner (take ownership), and GenericWrite (modify attributes) on sensitive objects like Domain Admins groups, domain controllers, or GPOs.

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Analyzing Active Directory ACL Abuse

What else does mukul975 publish alongside Analyzing Active Directory ACL Abuse?
Analyzing Active Directory ACL Abuse is one of 25 skills that DirSkills catalogs from mukul975/Anthropic-Cybersecurity-Skills, the repository it ships in. Its siblings there include API Gateway Log Analysis, Abusing DPAPI for Credential Access and Achieving CMMC Level 2 Compliance. Each one is a separate skill with its own page in this directory, installs the same way Analyzing Active Directory ACL Abuse does, and is maintained by mukul975 in that same repository. The rest of the collection is listed on the mukul975/Anthropic-Cybersecurity-Skills page.
How does Analyzing Active Directory ACL Abuse compare to other DevOps skills?
Analyzing Active Directory ACL Abuse ranks #58 by stars among the 798 DevOps skills in this catalog. The most-starred ones next to it are Backend Patterns, API Connector Builder and Migration. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Analyzing Active Directory ACL Abuse against them. Open each page to compare what they document and how they install.