Find paths to admin access through AD certificates.
What it does
Guides exploitation of AD CS misconfigurations to obtain elevated domain access and persistent authentication certificates.
When to use it
Use when targeting misconfigured AD CS for privilege escalation or certificate-based persistence.
How to use it
Give it an AD CS target; it guides certificate requests and authentication to obtain elevated access.
Uses
AD
AD
Good to know
- cannot be undone: AD CS
Latest review
What you need · 3
Uses Certipy as the recommended tool for enumerating the target and performing certificate attacks.
Requires a target certificate authority and its enrollment infrastructure; individual attack paths depend on particular misconfigurations.
Access · 3
This skill
AD CS
Write
Changes certificate authority settings (irreversible)
Active Directory
Write
Changes a domain user's identity