[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M71KD62D8PR77HADF8HKK0BK":3,"skill-same:01M71KD62D8PR77HADF8HKK0BK":72},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":23,"publishedAt":43,"linkOnly":44,"markdownContent":45,"markdownBody":46,"frontMatter":47,"refName":49,"commitSha":50,"skillDirectory":51,"forksCount":52,"repositoryHtmlUrl":53,"repositoryHomepageUrl":54,"ownerHtmlUrl":55,"ownerBlogUrl":56,"ownerDescription":57,"updatedAt":58,"install":59,"resources":71},"01M71KD62D8PR77HADF8HKK0BK","windows-ad",null,"Use for authorized Active Directory and Windows identity attacks including Kerberos, AD CS, BloodHound paths, NTLM relay, and domain privilege escalation research.","coco-research\u002Fcoco","coco-research","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F68911604?v=4","01M71JRE9C4NM4NSZM4JD0BJTB","Coco Research","01M71JREA0ZMR0PMH3CKA99SN1",631,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fwindows-ad\u002FSKILL.md",[18],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42],"windows","windows ad","ad","active","privilege","for","true","privilege escalation","attacks","relay","paths","directory","domain","use","kerberos","bloodhound","escalation","identity","research","2026-11-10 10:12:30",false,"---\nname: windows-ad\ndescription: Use for authorized Active Directory and Windows identity attacks including Kerberos, AD CS, BloodHound paths, NTLM relay, and domain privilege escalation research.\nuser-invocable: true\n---\n\n# Windows \u002F Active Directory Security\n\n## 适用场景\n\n- 域渗透、Kerberoasting、AS-REP、委派\n- AD CS（ESC1–ESC8 等）证书攻击\n- BloodHound \u002F SharpHound 攻击路径\n- NTLM Relay \u002F Coercer 强制认证\n- 本地提权到域路径（Potato 等作为跳板）\n\n## 与 attack-chain 关系\n\n- **多阶段从外网到域控** → PRIMARY 可仍是 `attack-chain\u002F`，本 skill 为 **AD 专科**\n- **已在域内专注身份** → PRIMARY = 本 skill\n\n## 工作流\n\n### 1. 枚举\n\n```bash\n# 示例 Impacket \u002F 内置（需凭据与授权）\nnxc smb \u003Crange> -u user -p pass\nbloodhound-python -d domain.local -u user -p pass -c All -ns \u003CDC>\n```\n\n### 2. 常见路径（先图后枪）\n\n```text\n□ Kerberoast \u002F AS-REP → 离线破解\n□ ACL 滥用（GenericAll\u002FWriteDacl）\n□ 委派（非约束\u002F约束\u002F基于资源）\n□ AD CS 模板错误 → Certipy\n□ 中继：LLMNR\u002FNBT-NS + ntlmrelayx（确认授权）\n```\n\n### 3. 凭证与横向\n\n```text\n□ secretsdump \u002F lsassy \u002F mimikatz（严格授权与清理）\n□ PtH \u002F PtT \u002F 黄金票仅在授权红队范围\n□ 每步写 Evidence；高危等用户确认\n```\n\n## 工具链\n\n| 工具 | 用途 |\n|------|------|\n| BloodHound \u002F SharpHound | 路径图 |\n| Certipy | AD CS |\n| Impacket \u002F NetExec | 横向与枚举 |\n| Rubeus \u002F Mimikatz | 票据与凭证（授权） |\n| Coercer \u002F Responder | 强制认证 \u002F 投毒 |\n\n## 参考\n\n- `references\u002Fad-attack-paths.md`\n- `..\u002Fpentest-tools\u002Freferences\u002Fnetwork-attack-defense.md`\n- `..\u002Fattack-chain\u002F`\n","# Windows \u002F Active Directory Security\n\n## 适用场景\n\n- 域渗透、Kerberoasting、AS-REP、委派\n- AD CS（ESC1–ESC8 等）证书攻击\n- BloodHound \u002F SharpHound 攻击路径\n- NTLM Relay \u002F Coercer 强制认证\n- 本地提权到域路径（Potato 等作为跳板）\n\n## 与 attack-chain 关系\n\n- **多阶段从外网到域控** → PRIMARY 可仍是 `attack-chain\u002F`，本 skill 为 **AD 专科**\n- **已在域内专注身份** → PRIMARY = 本 skill\n\n## 工作流\n\n### 1. 枚举\n\n```bash\n# 示例 Impacket \u002F 内置（需凭据与授权）\nnxc smb \u003Crange> -u user -p pass\nbloodhound-python -d domain.local -u user -p pass -c All -ns \u003CDC>\n```\n\n### 2. 常见路径（先图后枪）\n\n```text\n□ Kerberoast \u002F AS-REP → 离线破解\n□ ACL 滥用（GenericAll\u002FWriteDacl）\n□ 委派（非约束\u002F约束\u002F基于资源）\n□ AD CS 模板错误 → Certipy\n□ 中继：LLMNR\u002FNBT-NS + ntlmrelayx（确认授权）\n```\n\n### 3. 凭证与横向\n\n```text\n□ secretsdump \u002F lsassy \u002F mimikatz（严格授权与清理）\n□ PtH \u002F PtT \u002F 黄金票仅在授权红队范围\n□ 每步写 Evidence；高危等用户确认\n```\n\n## 工具链\n\n| 工具 | 用途 |\n|------|------|\n| BloodHound \u002F SharpHound | 路径图 |\n| Certipy | AD CS |\n| Impacket \u002F NetExec | 横向与枚举 |\n| Rubeus \u002F Mimikatz | 票据与凭证（授权） |\n| Coercer \u002F Responder | 强制认证 \u002F 投毒 |\n\n## 参考\n\n- `references\u002Fad-attack-paths.md`\n- `..\u002Fpentest-tools\u002Freferences\u002Fnetwork-attack-defense.md`\n- `..\u002Fattack-chain\u002F`\n",{"name":5,"description":7,"user-invocable":48},true,"main","cd89f013b617f7eea982a9bbc60e992974fda2aa","systems\u002Freverse-skill\u002Fskills\u002Fwindows-ad",15,"https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco","https:\u002F\u002Fcocoresearch.org\u002Fcoco\u002F","https:\u002F\u002Fgithub.com\u002Fcoco-research","https:\u002F\u002Fcocoresearch.org","Local-first, open-source tools for people who work with AI agents: governed memory, agents that check their own work, and data that stays on your machine.","2026-11-11 12:18:13",{"source":8,"skillName":5,"commands":60,"prompt":70,"zipAvailable":48},[61,64,67],{"tool":62,"command":63},"npx","npx skills add coco-research\u002Fcoco --skill windows-ad",{"tool":65,"command":66},"bunx","bunx skills add coco-research\u002Fcoco --skill windows-ad",{"tool":68,"command":69},"pnpm","pnpm dlx skills add coco-research\u002Fcoco --skill windows-ad","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Freverse-skill\u002Fskills\u002Fwindows-ad\u002FSKILL.md",[],[73,98,108,126,161,180],{"skillNo":74,"name":75,"nameZh":6,"description":76,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":77,"categories":78,"keywords":80,"publishedAt":43},"01M71KEJXF9KMT0BWCMRSRFA4M","trading-super-intelligence","Trading Super Intelligence Team. Named real-world personas across 8 cells. Built local-first (LM Studio) and validator-gated. Illustrative composites; see DISCLAIMER.md.","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Fsuperintelligence\u002Ftrading\u002FSKILL.md",[79],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97],"super","trading super intelligence","intelligence","trading","validator","personas","local","composites","studio","team","across","world","first","gated","2026","lm studio","local-first",{"skillNo":99,"name":100,"nameZh":6,"description":101,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":102,"categories":103,"keywords":105,"publishedAt":43},"01M71KEFWS3CMAP7DF1P0FWTDE","strategy-super-intelligence","Strategy Super Intelligence Team. Named real-world personas across 7 cells. Built local-first (LM Studio) and validator-gated. Illustrative composites; see DISCLAIMER.md.","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Fsuperintelligence\u002Fstrategy\u002FSKILL.md",[104],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[106,81,107,83,85,86,87,88,89,90,91,92,93,94,95,96,97],"strategy","strategy super intelligence",{"skillNo":109,"name":110,"nameZh":6,"description":111,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":112,"categories":113,"keywords":120,"publishedAt":43},"01M71KED56ZEPK2QE84QSQPMT0","risk-compliance-super-intelligence","Risk & Compliance (GRC) Super Intelligence Team. Named real-world personas across 7 cells. Built local-first (LM Studio) and validator-gated. Illustrative composites; see DISCLAIMER.md.","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Fsuperintelligence\u002Frisk-compliance\u002FSKILL.md",[114,115],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":116,"categoryName":117,"taxonomyType":118,"taxonomyTypeDesc":119},"01JBSEEDCAT000000000000037","律师与法务","PROFESSION","适用职业",[121,81,122,123,124,83,85,86,87,88,125,89,90,91,92,93,94,95,96,97],"risk","risk compliance super intelligence","compliance","risk compliance","grc",{"skillNo":127,"name":128,"nameZh":6,"description":129,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":130,"categories":131,"keywords":145,"publishedAt":43},"01M71KE9A2FWSC74VA96W1EZSN","product-design-super-intelligence","Your product + design brain trust and decision partner. Named personas across 8 cells spanning product strategy, discovery\u002Fresearch, growth\u002Fmetrics, design foundations\u002Fusability, design leadership\u002Fcraft, UX\u002Fcontent, design systems, and a…","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Fsuperintelligence\u002Fproduct-design\u002FSKILL.md",[132,135,138,139,142],{"categoryNo":133,"categoryName":134,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000015","视觉设计",{"categoryNo":136,"categoryName":137,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000021","资料检索与研究",{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":140,"categoryName":141,"taxonomyType":118,"taxonomyTypeDesc":119},"01JBSEEDCAT000000000000031","产品经理",{"categoryNo":143,"categoryName":144,"taxonomyType":118,"taxonomyTypeDesc":119},"01JBSEEDCAT000000000000032","设计师",[146,147,83,148,81,149,150,151,152,153,154,90,91,155,156,95,157,158,159,160],"design","product","product design","product design super intelligence","foundations","product-design","decision","design systems","usability","leadership","ux","brain","craft","metrics","trust",{"skillNo":162,"name":163,"nameZh":6,"description":164,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":165,"categories":166,"keywords":169,"publishedAt":43},"01M71KE6H9FPSD9TECYFBPXZ8Y","legal-ip-super-intelligence","Your legal, IP, and regulatory brain trust. 31 named personas across 7 cells covering patent strategy, tech licensing, regulatory litigation, AI governance, open-source compliance, privacy law, and antitrust.","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Fsuperintelligence\u002Flegal-ip\u002FSKILL.md",[167,168],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":116,"categoryName":117,"taxonomyType":118,"taxonomyTypeDesc":119},[170,81,171,83,172,173,160,174,86,175,176,177,106,90,91,178,123,179,95,157],"ip","legal ip super intelligence","legal","sep","tech","litigation","ai governance","open","open-source","governance",{"skillNo":181,"name":182,"nameZh":6,"description":183,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":184,"categories":185,"keywords":187,"publishedAt":43},"01M71KE36QRY610V6YVB9JWRND","healthcare-life-sciences-super-intelligence","Your healthcare and life sciences brain trust. 25 named personas across 7 cells covering drug discovery, medtech, biotech strategy, health policy, genomics, clinical trials, and healthcare economics.","https:\u002F\u002Fgithub.com\u002Fcoco-research\u002Fcoco\u002Fblob\u002Fmain\u002Fsystems\u002Fsuperintelligence\u002Fhealthcare-life-sciences\u002FSKILL.md",[186],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[188,81,189,190,83,173,160,191,192,86,193,194,106,90,91,195,196,197,198,95],"healthcare","healthcare life sciences super intelligence","life","economics","discovery","policy","clinical","clinical trials","health","trials","genomics"]