Individual skill
windows-postexploit
Windows post-exploitation — Active Directory attacks, Kerberos exploitation, ADCS abuse, lateral movement, persistence, privilege escalation, credential harvesting, stealth encoding (Base64/AMSI/obfuscate), and pwsh.exe support
.cyberstrike/skill/windows-postexploit/SKILL.md
Source commit a69de8cc5077cb87e2f229182cfb78a107fcbead
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 9, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 3,518
- Repository last updated
- Nov 10, 2026
- License
- AGPL-3.0
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- agents Repository topic
- ai-hacking Repository topic
- ai-penetration-testing Repository topic
- ai-pentesting Repository topic
- ai-security Repository topic
- artificial-intelligence Repository topic
- bug-bounty Repository topic
- code-quality Repository topic
- ctf-tools Repository topic
- cybersecurity Repository topic
- windows Declared skill tag
- post-exploitation Declared skill tag
- active-directory Declared skill tag
- kerberos Declared skill tag
- adcs Declared skill tag
- lateral-movement Declared skill tag
- persistence Declared skill tag
- privilege-escalation Declared skill tag
- credential-access Declared skill tag
- defense-evasion Declared skill tag
- lsass Declared skill tag
- dpapi Declared skill tag
- etw Declared skill tag
- amsi Declared skill tag
- sam Declared skill tag
- dcsync Declared skill tag
- rbcd Declared skill tag
- coercion Declared skill tag
- byovd Declared skill tag
- dll-hijack Declared skill tag
- service-exploit Declared skill tag
- applocker-bypass Declared skill tag
- stealth-encoding Declared skill tag
- pwsh Declared skill tag
- base64 Declared skill tag
- obfuscation Declared skill tag
- process-injection Declared skill tag
- anti-forensics Declared skill tag
- data-exfiltration Declared skill tag
- firewall Declared skill tag
- local-recon Declared skill tag
- ps-downgrade Declared skill tag
- operations Derived category
- data Derived category
Declared tags are partial or unavailable.
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
No licensed excerpt is available. You can inspect the pinned source.
