Skip to content
Get packs

LDAP Security Hardening Audit

Audit an LDAP/Active Directory server for weak signing, missing LDAPS and anonymous binding

Source Download skill
Repository
mukul975/Anthropic-Cybersecurity-Skills
Stars
35,430
Licence
Apache-2.0
Files
3 files

What it does

When installed, this skill teaches an AI agent how to review and harden the security of a directory service such as LDAP or Active Directory, which stores usernames and passwords for many systems. The agent is guided to check that encrypted connections (LDAPS), channel binding and LDAP signing are enforced, and to look for anonymous access and risky access control settings, then write up findings with recommended fixes. The bundled script is a small Python tool that connects to a server address and reports whether plain LDAP signing appears enforced and whether LDAPS responds.

Great for

  • IT or security staff auditing an Active Directory or LDAP environment they are authorised to manage
  • Engineers preparing a hardening checklist or compliance evidence for access control reviews
  • Students learning how directory service attacks such as password spraying and LDAP relay are mitigated

Skip it if

  • Testing servers you do not own or have written permission to assess, since the script opens real connections and attempts binds
  • Treating the script output as proof of configuration: its signing check only tests whether an anonymous connection succeeds, which does not confirm the signing policy, so results need manual verification

Try asking

  • “Audit our domain controller at 10.0.0.5 for LDAP signing and LDAPS availability and summarise the findings”
  • “Review this Active Directory configuration against LDAPS, channel binding and signing best practice”
  • “Write a hardening checklist for our LDAP service mapped to NIST 800-53 access control controls”
  • “Explain how to enforce LDAP signing via Group Policy on our domain controllers”
Step-by-step guide: how to use LDAP Security Hardening AuditInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 3 original files, the Apache-2.0 licence and an attribution note.

    configuring-ldap-security-hardening.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip configuring-ldap-security-hardening.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip configuring-ldap-security-hardening.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Only run the audit against systems you are authorised to test, and preferably in a lab or non-production copy first
  • Verify any reported finding directly in the server's Group Policy or configuration, because the script's checks are simplified and the excerpt shows the signing check reports a fixed HIGH result after a bind attempt
  • Ask the agent to explain each recommendation so you can confirm it fits your environment before applying changes

What's inside

  • references/api-reference.md
  • scripts/agent.py
  • SKILL.md

Redistributed unmodified from mukul975/Anthropic-Cybersecurity-Skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.