active-directory-certificate-services

What problem does it solve?

This Skill helps address the issue of misconfigured Active Directory Certificate Services (AD CS), which can be exploited for privilege escalation. It covers various attack techniques such as template abuse, NTLM relay, and certificate-based persistence.

Core Features & Use Cases

• Template Abuse: Exploit vulnerabilities in certificate templates for privilege escalation.
• NTLM Relay: Use NTLM relay to authentication endpoints for certificate enrollment.
• Certificate-Based Persistence: Implement persistence by creating certificates with the CA's private key.
• Use Case: When conducting a security assessment, this Skill can be used to identify and exploit AD CS misconfigurations to gain higher privileges.

Quick Start

Use the 'active-directory-certificate-services' skill to perform a targeted attack on AD CS.