Grok Bot template · Security and compliance
Windows Ad
Run authorized Active Directory attacks: Kerberos, AD CS, BloodHound, NTLM relay.
What it can do
The skills built into this template. Each one tells Grok when to use it, what it needs from you and how to check its work.
- Enumerate AD with BloodHound
- Execute Kerberoasting and AS-REP Roasting
- Exploit AD CS misconfigurations
- Perform NTLM relay and coercion
- Escalate privileges via ACL abuse
- Dump credentials with Impacket
- Delegation attacks
- Lateral movement and pass-the-hash
- LLMNR/NBT-NS poisoning and relay
Apps it works with
Connect these in Grok for the best results. It also works without them: you paste the information in.
active directory domain credentialsdomain controller access (authorized)bloodhound instanceimpacket tools
The full template
For members
The complete Windows Ad template: its identity, every skill step by step, its limits and its first-run questions, ready to paste into a new Grok Bot. Members get it, and every other template here.
Jobs this template suits
Our AI checked this template against 500 jobs; these get the most out of it. Each job links to its learning path.