mcpField
S
system

system

github.com/transilienceaiSecurity598182 installsUpdated 13w ago
Repository

About system

A security skill for assessing Active Directory, privilege-escalation paths, and exploit-development scenarios. It guides enumeration, exploitation, impact demonstration, and evidence-based attack-chain documentation.

Key features

  1. 01Active Directory attack techniques
  2. 02Privilege-escalation assessment
  3. 03Exploit-development references
  4. 04Attack-chain documentation

Use cases

  1. 01Assessing domain attack paths
  2. 02Investigating local privilege escalation
  3. 03Studying exploit-development scenarios

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/transilienceai/communitytools --skill system

After installing, type/systemin Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

reference/
foothold-patterns.md
format-string-exploitation.md
heap-exploitation.md
INDEX.md
reference/scenarios/ad/
acl-abuse-chains.md
adcs-esc1.md
adcs-esc15.md
adcs-esc16.md
adcs-esc3.md
adcs-esc4.md
adcs-esc6.md
adcs-esc7.md
adcs-esc8-kerb-relay.md
adfs-golden-saml.md
as-rep-roast.md
badsuccessor-dmsa.md
certipy-ldap-shell-fallback.md
constrained-delegation.md
cross-forest-trust.md
cross-session-ntlm-relay.md
dcsync.md
dns-record-poisoning.md
gmsa.md
golden-ticket.md
kerberoast.md
kerberos-only-domain.md
kpasswd-expired-password-reset.md
lansweeper-cred-mapping-honeypot.md
laps-readers.md
ldap-simple-bind-capture.md

Details

From the project README

System

Test system-level security including Active Directory, privilege escalation, and exploit development.

Techniques

TypeKey Vectors
Active DirectoryKerberoasting, AS-REP roasting, DCSync, PtH, Golden/RODC Ticket, RBCD, ACL abuse, KeyList, Shadow Credentials, ADCS (ESC1-9/16)
Privilege EscalationSUID/sudo abuse, kernel exploits, service misconfig, token manipulation
Exploit DevelopmentBuffer overflow, format string, ROP chains, shellcode, heap exploitation

Workflow

  1. Enumerate system and domain information
  2. Identify escalation paths and misconfigurations
  3. Exploit with appropriate techniques
  4. Demonstrate impact (domain admin, root access)
  5. Document attack chain with evidence

Reference

  • reference/INDEX.md - Router for AD attacks, privilege escalation, and exploit-dev scenarios (see reference/scenarios/)
  • reference/format-string-exploitation.md - Format string read/write primitives, architecture differences, mitigation bypass
  • reference/heap-exploitation.md - Modern glibc heap techniques (tcache poison, unsorted bin leak, environ stack leak, ROP)

Comments

Markdown supported