A security assessment toolkit for Claude Code that combines skills, MCP servers, and agent teams to guide penetration testers through recon, initial access, and lateral movement. Its skills cover Active Directory and AD CS attack techniques.
@blacklanternsecurityBypass two-factor authentication (2FA/MFA) during authorized penetration testing.
@blacklanternsecurityExploits misconfigured Active Directory ACLs for privilege escalation. Covers GenericAll, GenericWrite, WriteDACL, WriteOwner,…
@blacklanternsecurityEnumerates Active Directory domains and maps attack surface for penetration testing.
@blacklanternsecurityEstablishes persistent access in Active Directory environments after domain compromise. Covers DCShadow (rogue DC attribute…
@blacklanternsecurityExploits ADCS through ACL abuse on templates/CA objects and NTLM relay to enrollment endpoints. Covers ESC4 (template ACL →…
@blacklanternsecurityEstablishes persistence and exploits weak certificate mapping in AD CS. Covers ESC9 (no security extension), ESC10 (weak…
@blacklanternsecurityExploits misconfigured AD CS certificate templates to impersonate any domain user via SAN manipulation or enrollment agent abuse.…
@blacklanternsecurityExploit Apache JServ Protocol (AJP) misconfigurations and Ghostcat (CVE-2020-1938) for file read and remote code execution on…
@blacklanternsecurityForces remote systems to authenticate back to attacker-controlled listeners and relays captured authentication to escalate…
@blacklanternsecurityBypass antivirus and EDR detection for payload delivery during exploitation. Covers custom payload compilation (mingw C, Go),…
@blacklanternsecurityExploit browser-based attack surfaces: malicious extension crafting for bot interaction scenarios, Chrome DevTools Protocol abuse…
@blacklanternsecurityGuide OS command injection exploitation during authorized penetration testing.
@blacklanternsecurityActive Directory discovery subagent for red-run. Performs AD enumeration, BloodHound collection, LDAP queries, and attack surface…
@blacklanternsecurityActive Directory exploitation subagent for red-run. Executes one AD technique skill per invocation as directed by the…
@blacklanternsecurityCredential cracking subagent for red-run. Performs offline hash cracking and encrypted file cracking using hashcat and john as…
@blacklanternsecurityAV/EDR evasion subagent for red-run. Builds AV-safe payloads and applies runtime evasion techniques as directed by the…
@blacklanternsecurityLinux privilege escalation subagent for red-run. Executes one privesc skill per invocation as directed by the orchestrator.…
@blacklanternsecurityNetwork reconnaissance subagent for red-run. Performs host discovery, port scanning, service enumeration, and quick-win checks as…
@blacklanternsecurityPassword spraying subagent for red-run. Executes credential spraying against any authentication service (AD, web forms, SSH,…
@blacklanternsecurityPivoting and tunneling subagent for red-run. Sets up network tunnels through compromised hosts to reach internal subnets. Handles…
@blacklanternsecurityDeep analysis subagent for red-run. Analyzes custom applications, binaries, and scripts that standard technique skills could not…
@blacklanternsecurityWeb application discovery subagent for red-run. Performs web application enumeration, technology fingerprinting, and…
@blacklanternsecurityWeb application exploitation subagent for red-run. Executes one web technique skill per invocation as directed by the…
@blacklanternsecurityWindows privilege escalation subagent for red-run. Executes one privesc skill per invocation as directed by the orchestrator.…
@blacklanternsecurityShips with red-run: Security assessment toolkit for Claude Code. red-run combines skills, MCP servers, and Claude Code agent…
@blacklanternsecurityScans networks and hosts to discover open ports, running services and operating systems.
@blacklanternsecurityShips with red-run: Security assessment toolkit for Claude Code. red-run combines skills, MCP servers, and Claude Code agent…
@blacklanternsecurityShips with red-run: Security assessment toolkit for Claude Code. red-run combines skills, MCP servers, and Claude Code agent…
@blacklanternsecurityShips with red-run: Security assessment toolkit for Claude Code. red-run combines skills, MCP servers, and Claude Code agent…
@blacklanternsecurityRuns a command and control server that red teams use to manage implants during security testing.
@blacklanternsecurityShips with red-run: Security assessment toolkit for Claude Code. red-run combines skills, MCP servers, and Claude Code agent…
@blacklanternsecurityIs this you? Claim your profilePut a plugin at the top of Plugins, from $9
