Exploits the noPac Active Directory privilege-escalation chain (CVE-2021-42278 sAMAccountName spoofing plus CVE-2021-42287 KDC PAC confusion) using Impacket and secretsdump.py to escalate from a standard domain user to Domain Admin. Use when red-teaming or pentesting Active Directory to validate machine-account impersonation and DCSync-based credential dumping.
安装
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill exploiting-nopac-cve-2021-42278-42287npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill exploiting-nopac-cve-2021-42278-42287 -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill exploiting-nopac-cve-2021-42278-42287 -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/exploiting-nopac-cve-2021-42278-42287gh skill install mukul975/Anthropic-Cybersecurity-Skills exploiting-nopac-cve-2021-42278-42287git clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/exploiting-nopac-cve-2021-42278-42287 ~/.claude/skills/exploiting-nopac-cve-2021-42278-42287 # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/exploiting-nopac-cve-2021-42278-42287 ~/.agents/skills/exploiting-nopac-cve-2021-42278-42287 # Codex, Cursor, Gemini CLI, Copilot, OpenCode