competition-ad-certificate-abuse

What problem does it solve?

Traces certificate-based privilege paths in AD CS by mapping CA configurations, certificate templates, EKUs, enrollment rights, and mapping logic to concrete privilege outcomes. This helps security teams verify how a certificate can be issued and accepted to grant access, identify misconfigurations, and document an auditable abuse chain.

Core Features & Use Cases

• Map CA configuration, template trust, enrollment permissions, and mapping behavior to a compact, reproducible chain.
• Prove cert-to-privilege acceptance by linking issued certificates to a target service or logon path.
• Use cases include documenting EKU/SAN controls, enrollment agent behavior, and CA-policy based privilege flows.

Quick Start

Identify the CA, template, enrolling principal, and accepting service before diving into every certificate detail.