Enumerate and abuse Active Directory Certificate Services misconfigurations for privilege escalation.
npx skills add https://github.com/AeonDave/malskill --skill certify
Please help me install this Agent Skill. Skill: certify Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/windows/certify Command: npx skills add https://github.com/AeonDave/malskill --skill certify
This Skill automates the detection and exploitation of misconfigurations within Active Directory Certificate Services (AD CS), enabling privilege escalation and attack surface mapping.
Use the certify skill to find all vulnerable certificate templates.
High-intent search queries and answers about installing and using this skill.
To enumerate Active Directory Certificate Services misconfigurations, this Skill identifies vulnerable certificate templates including ESC1 through ESC8. It automates the detection of template flaws to map privilege escalation pathways within AD CS.
ESC1 through ESC8 are specific Active Directory Certificate Services template misconfigurations that enable privilege escalation. This Skill audits AD CS security posture by identifying these vulnerabilities and checking if certificates can be requested for alternate users.
You can audit your domain for AD CS privilege escalation risks by using this Skill to find all vulnerable certificate templates. It maps exploitation pathways and identifies misconfigurations before attackers can abuse them to gain higher privileges.
Yes, you can request certificates for alternate users to test AD CS abuse. This Skill facilitates certificate requests for alternate users and exploits template misconfigurations to demonstrate privilege escalation within the domain.
Yes, this Skill works for auditing Windows security and Active Directory Certificate Services without external dependencies. It operates independently to identify ESC1-ESC8 template vulnerabilities and map exploitation pathways.
The best way to map attack surfaces in AD CS environments is to enumerate all vulnerable certificate templates. This Skill identifies ESC1-ESC8 misconfigurations and facilitates abuse to demonstrate potential privilege escalation pathways.
blacklanternsecurityAutomate AD CS persistence via Golden Certificate forging and certificate theft.
blacklanternsecurityForge Golden, Silver, Diamond, and Sapphire Kerberos tickets using key materials.
hardw00tSimulate attacker techniques across internal networks and Active Directory environments.
utsavthakurIdentify and exploit Active Directory Certificate Services vulnerabilities for privilege escalation.
