OpenClaw pentesting 실험에서 재료 활용 — 기업의 Active Directory 환경에 대한 AI 보조 적 팀 작업의 탐험.

내용

-AD-Recon-Authenticated-SKILL.md — LDAP enumeration, BloodHound ingestion, Kerberoasting, delegation Analysis, SMB enumeration 및 공격 경로 식별을 포함하는 Linux에서 인증된 AD reconnaissance를 위한 구조화된 기술/메들리학. -matrix-claw-persona.txt — OpenClaw Red 팀 에이전트에 대한 시스템 인당 및 운영 제약, 명령의 사슬을 정의, 보고 요구 사항, 권한 경계, 및 안전 제어. -legacy-ad-attack-paths-REDACTED.md — 참여 중에 생성 된 공격 경로 분석 출력의 적색 예, 방법론 표면을 찾는 유형의 해독. 공중 방출을 위한 Sanitised. -OpenClaw-Architecture.md — NixOS의 OpenClaw 플랫폼의 아키텍처 개요, 조각 기반 재현성, 선언 호스트 배포, 기술 및 패키지 관리, 그리고 참여 호스트에 제약 행동의 난간.

텍스트

pentesting-skills

Accompanying materials from the OpenClaw pentesting experiment — an exploration of AI-assisted red team operations against enterprise Active Directory environments.

Contents

• AD-Recon-Authenticated-SKILL.md — A structured skill/methodology for authenticated AD reconnaissance from Linux, covering LDAP enumeration, BloodHound ingestion, Kerberoasting, delegation analysis, SMB enumeration, and attack path identification.
• matrix-claw-persona.txt — The system persona and operating constraints for the OpenClaw red team agent, defining its chain of command, reporting requirements, permission boundaries, and safety controls.
• legacy-ad-attack-paths-REDACTED.md — A redacted example of attack path analysis output produced during an engagement, demonstrating the type of findings the methodology surfaces. Sanitised for public release.
• OpenClaw-Architecture.md — Architecture overview of the OpenClaw platform on NixOS, covering flake-based reproducibility, declarative host deployment, skill and package management, and the guardrails that constrain agent behaviour on the engagement host.

Context

These materials were developed as part of a research project investigating how AI agents can be applied to penetration testing workflows. The skill file and persona define how the agent operates; the attack paths document is a representative (redacted) output.

Disclaimer

These materials are provided for educational and research purposes only. Use only in authorised engagements with explicit written permission.