A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.
Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports.
Introductory guide on the configuration and subsequent exploitation of Active Directory Certificate Services with Certipy. Based on the white paper Certified Pre-Owned.
An AD CS toolkit for AD Admins, Defensive Security Professionals, and Filthy Red Teamers
Pull a customizable report of expiring certificates directly from your ADCS Certificate Authorities.
A small tool to identify and remediate common misconfigurations in Active Directory Certificate Services
PowerShell tools for AD CS and EJBCA/MSAE PKI: bulk template validity updates (SC-081), batch CSR submission (.req/.csr/.pem or any PKCS #10 file) with resume-safe tracking, cross-forest template sync (target needs no CA), and offline CEP setup per machine or via GPO. Field-validated with EJBCA; Pester-tested on PowerShell 5.1 & 7.
This is an individual project I did using VMware. I had 3 Windows Server machines and 1 CentOS 7 machine. This project covered the installation and configuration of Active Directory, DNS, Group Policy, Active Directory Certificate Services, Apache, LAMP, Samba File Sharing, BIND DNS, and Windows File Sharing.
Create a vulnerable Active Directory Certificate Services (AD CS) environment that allows you to test the most common AD CS attacks (ESC1 to ESC8) in a local lab.
Synchronize the PKI certs from Entra-Joined to Active Directory.
Native COM revocation provider for AD CS Online Responder that answers OCSP from a snapshot of the CA certificate database instead of a CRL — revocation shows up in about a minute, with no CRL publication cycle. Bilingual UI, multi-CA, x64/x86/ARM64.
A policy-enforcing registration-authority broker between native Windows certificate-enrollment clients and Microsoft AD CS.
My blog.
To associate your repository with the active-directory-certificate-services topic, visit your repo's landing page and select "manage topics."