DEDUPED Hot AI repos, turned into use cases Get 5 a day

What you can do with Claude AD

Claude-AD is a Claude Code plugin that gives Claude an Active Directory pentest method: skills, agents and slash commands for authorized internal assessments that drive standard tools such as netexec, impacket, certipy, bloodyAD and BloodHound CE.

Trended earlier

ADScanPro/Claude-AD on GitHub

Third-party repos we don't own or vouch for. AI-generated use cases can be wrong: review everything and run at your own risk.

Authorization notice. This tool is dual-use. Only use it on software, sites and systems you own or have explicit permission to test, and follow the relevant licenses and terms of service.

What do you want to do?

4 use cases

  • Scope an AD assessment in the right phase order

    Use the methodology skills and /ad-scope to plan an authorized internal AD test before any tooling runs.

    View prompt
    Using the Claude-AD repo (ADScanPro/Claude-AD), run /ad-scope for the authorized internal domain <target-domain> and produce a written scope with the phase order and the environment constraints to check. Verify that the scope names the authorized targets and explicitly excludes anything outside the signed authorization.

  • Map low-privilege to Domain Admin attack paths

    Run /ad-recon and /ad-attack-paths to collect the directory graph and reason about paths to Domain Admin.

    View prompt
    Using the Claude-AD repo (ADScanPro/Claude-AD), run /ad-recon and then /ad-attack-paths against the authorized domain <target-domain> starting from the low-privilege account <low-priv-user>. Expected output is a ranked list of candidate paths to Domain Admin with the technique and detection events for each step. Verify that no step is executed or marked as executed without explicit human confirmation.

  • Review ADCS ESC1 through ESC17 misconfigurations

    Check certificate services for ESC1 through ESC17 weaknesses with the adcs-attacks skill and certipy.

    View prompt
    Using the Claude-AD repo (ADScanPro/Claude-AD), apply the adcs-attacks skill to the certificate authority <ca-name> in the authorized domain <target-domain>. Expected output is a table of matched ESC variants with the certipy check and the fix for each. Verify that every finding cites a template or setting you actually enumerated.

  • Map AD findings to DORA, NIS2 and ENS controls

    Use the compliance-mapping skill to tie each technique you tested to a control family for an audit report.

    View prompt
    Using the Claude-AD repo (ADScanPro/Claude-AD), apply the compliance-mapping skill to these confirmed techniques from the authorized assessment: <technique-list>. Expected output is a table mapping each technique to a conceptual DORA, NIS2 or ENS control family. Verify that each mapping is labeled conceptual and confirmed against the auditor's own control catalog.

How to use Claude AD

  1. Check you have what it needs: Claude Code installed; Written authorization to test the target domain (your own lab, a contracted engagement, or a CTF); The standard tools the plugin drives (netexec, impacket, certipy, bloodyAD, BloodHound CE) available to you for the engagement.
  2. Open ADScanPro/Claude-AD on GitHub and read the README and license.
  3. Install the plugin in Claude Code by running /plugin marketplace add ADScanPro/Claude-AD.
  4. Install the plugin by running /plugin install claude-ad@claude-ad.
  5. Start an engagement session and run /ad-scope to define the authorized targets and rules.
  6. Ask Claude to walk through the ad-methodology and ad-environment-constraints skills for this domain.

These steps come from our top use case, Scope an AD assessment in the right phase order, which also has a copy-paste agent prompt.

Claude AD alternatives · Best AI repos for Security and science

About this repo

  • Who it is forWritten for penetration testers and red-team operators who hold written authorization for an internal Active Directory assessment and want Claude to follow a structured method.
  • Why it is hot
  • Sourcegithub.com/ADScanPro/Claude-AD · Back to Hot repos

Requirements

  • Claude Code installed
  • Written authorization to test the target domain (your own lab, a contracted engagement, or a CTF)
  • The standard tools the plugin drives (netexec, impacket, certipy, bloodyAD, BloodHound CE) available to you for the engagement
Maintain Claude AD? Add the Featured on Deduped badge

Paste this into your README:

[![Featured on Deduped](https://dedupedai.com/badge/adscanpro-claude-ad.svg)](https://dedupedai.com/use-cases/adscanpro-claude-ad/?ref=badge)

More badge styles and HTML

Questions about Claude AD

What is Claude AD?

Claude-AD is a Claude Code plugin that gives Claude an Active Directory pentest method: skills, agents and slash commands for authorized internal assessments that drive standard tools such as netexec, impacket, certipy, bloodyAD and BloodHound CE. It is an open-source project on GitHub: https://github.com/ADScanPro/Claude-AD.

Who is Claude AD for?

Written for penetration testers and red-team operators who hold written authorization for an internal Active Directory assessment and want Claude to follow a structured method.

What can I do with Claude AD?

4 use cases so far, for example: Scope an AD assessment in the right phase order; Map low-privilege to Domain Admin attack paths; Review ADCS ESC1 through ESC17 misconfigurations. Each has steps and a copy-paste agent prompt.

What do I need to run Claude AD?

Claude Code installed; Written authorization to test the target domain (your own lab, a contracted engagement, or a CTF); The standard tools the plugin drives (netexec, impacket, certipy, bloodyAD, BloodHound CE) available to you for the engagement.

What are alternatives to Claude AD?

Other hot AI repos in Security and science: Rea, Reverify, Ablation, Awesome Reverse Engineered, Seep Reverse Lab.

Is Claude AD safe to run?

Deduped does not own, audit or vouch for it. Read the README and license, run it on your own systems first and review every command before you run it.