Gauntlithabusing-shadow-credentials-for-privesc
Unclaimed, from mukul975
Take over Active Directory accounts by writing attacker-controlled public keys to msDS-KeyCredentialLink (Shadow Credentials) with pyWhisker, Whisker, or Certipy, then authenticate via PKINIT to recover the target's NT hash without a password reset. Use when BloodHound shows GenericWrite/GenericAll…
We couldn't check all of this version, so there's no install button.
| Version | Commit | Pinned | Works with | Checks | Status | Install |
|---|---|---|---|---|---|---|
| 54a798831d22 | 54a7988 | 12 Nov 2026 | Claude Code, SKILL.md | Instructions read in full · Static code checks · Copy checkNot checked: Sandbox run: not built yet | Not fully checked |
No known issues found: Every check finished and our reviewer read this version in full. That isn't a guarantee.
Issues found: At least one check flagged something. Not confirmed harmful. Installing asks you to confirm.
Not fully checked: We couldn't check all of it, for example a file too big to read. No install button.
Hidden, under review: The install link is down while a reviewer looks again.
Removed, malicious: Confirmed harmful. If you installed it, its page shows how to remove it.