certify

What problem does it solve?

This Skill automates the detection and exploitation of misconfigurations within Active Directory Certificate Services (AD CS), enabling privilege escalation and attack surface mapping.

Core Features & Use Cases

• Enumeration: Identifies vulnerable certificate templates (ESC1-ESC8).
• Abuse: Requests certificates for alternate users and exploits template misconfigurations.
• Use Case: Before launching an attack, an administrator can use this tool to quickly identify all ways an attacker could abuse AD CS to gain higher privileges within the domain.

Quick Start

Use the certify skill to find all vulnerable certificate templates.