zhaoxuya520Install Competition Kerberos Delegation
Pick your agent. Every command is ready to paste.
npx skills add zhaoxuya520/reverse-skill --skill competition-kerberos-delegationThe open skills CLI detects your agents (Claude Code, Cursor, Codex and 70+ more) and installs to the right folder. Add -g to install globally.
01
Install it
Run the command above, or upload the folder in Claude.
02
Ask naturally
Describe the task. Your agent loads competition-kerberos-delegation when the request matches its description.
03
Name it if needed
If it does not trigger, say “use the competition-kerberos-delegation skill”. In Codex, type $competition-kerberos-delegation.
Competition Kerberos Delegation
Use this skill only as a downstream specialization after $ctf-sandbox-orchestrator is already active and has established sandbox assumptions, node ownership, and evidence priorities. If that has not happened yet, return to $ctf-sandbox-orchestrator first.
Use this skill when the hard part is not "is there Kerberos here," but which delegation edge exists, which ticket is being minted, and which service really accepts it.
Reply in Simplified Chinese unless the user explicitly requests English.
Quick Start
- Write the trust chain first: principal -> delegation edge -> ticket type -> target SPN -> accepting service -> resulting privilege.
- Separate ticket possession from accepted privilege.
- Keep SPNs, delegation mode, PAC/group data, encryption type, and service acceptance in one compact evidence block.
- Reproduce one minimal delegation chain before broadening into variants.
- Tie every privilege claim to a specific accepted ticket or service-side effect.
Workflow
1. Identify The Delegation Edge
- Determine whether the path is constrained delegation, unconstrained delegation, resource-based constrained delegation, protocol transition, or another trust edge.
- Inspect SPNs, ACLs, service accounts, SIDHistory, certificate templates, and replication rights only when they affect the active path.
2. Trace Ticket Minting And Acceptance
- Record TGT/TGS type, S4U steps when relevant, delegation flags, PAC or group data, encryption type, cache location, and target SPN.
- Prove which service actually accepts the ticket and what capability appears after acceptance.
3. Report The Effective Edge
- Compress the chain into one replayable path, not a vague "domain compromise" statement.
- Separate candidate edges from the edge that really lands privilege.
Read This Reference
- Load
references/kerberos-delegation.mdfor the delegation checklist, ticket fields to preserve, and common proof mistakes.
What To Preserve
- SPN, ticket type, delegation mode, PAC/group data, encryption type, cache location, accepting service
- Service-side logs, event IDs, logon session changes, or group changes proving effective privilege
- The exact trust edge that makes the ticket replayable
Tips for Competition Kerberos Delegation
- • Start a fresh session after installing so your agent picks up the new skill.
- • It bundles reference files. The agent reads them only when needed, so they cost no context until then.
- • It is part of a pack with 30 skills. Install only the ones you need with --skill to keep triggers precise.
- • If two skills overlap, mention the one you want by name.
Questions about Competition Kerberos Delegation
What does the Competition Kerberos Delegation skill do?
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for Kerberos delegation, SPN trust edges, S4U abuse, RBCD, constrained or unconstrained delegation, and service-ticket acceptance. Use when the user asks about constrained delegation, unconstrained delegation, RBCD, S4U, SPNs, ticket acceptance, or how a Kerberos trust edge turns into effective privilege under sandbox assumptions. Use only a
How do I install Competition Kerberos Delegation?
Run "npx skills add zhaoxuya520/reverse-skill --skill competition-kerberos-delegation" in your project. The skills CLI installs it for Claude Code, Cursor, Codex and 70+ other agents. In Claude on the web, upload the skill folder as a ZIP under Customize > Skills.
Does Competition Kerberos Delegation work in Cursor and Codex?
Yes. Competition Kerberos Delegation uses the open SKILL.md format, so it works in Claude Code, Claude, Cursor, OpenAI Codex, Gemini CLI, GitHub Copilot and other agents that support agent skills.
Is Competition Kerberos Delegation free?
Competition Kerberos Delegation is open source on GitHub under the MIT license. It is free to install; check the license before commercial use.
Who made Competition Kerberos Delegation?
Competition Kerberos Delegation is published by zhaoxuya520 in the zhaoxuya520/reverse-skill repository, together with 29 other skills.
