adwsdomaindump

ADWSDomainDump Volcador de información de Active Directory a través de ADWS Active Directory Web Services. Instalación Instalación recomendada: root@kitploit: pipx install git+https://github.com/mverschu/adwsdomaindump o pipx install . Uso root@kitploit: adwsdomaindump -u 'corp.local\jsmith' -p...

CVE-2022-26923

CVE-2022-26923 Descripción Esta vulnerabilidad permitía a un usuario con pocos privilegios escalar privilegios a administrador de dominio en un entorno predeterminado de Active Directory con el rol de servidor de Servicios de Certificados de Active Directory AD CS instalado. Está relacionada...

Thunderstorm

Thunderstorm Thunderstorm is a modular framework to exploit UPS devices. For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future. CVE Thunderstorm is currently capable of exploiting the following CVE: CVE-2022-47186 –...

Certipy

Certipy - Kit de Ataque y Enumeración de AD CS Certipy es un potente kit ofensivo y defensivo para enumerar y abusar de los Servicios de Certificados de Active Directory AD CS. Ayuda a equipos rojos, testers de penetración y defensores a evaluar configuraciones incorrectas de AD CS, incluyendo...

Certify

Certify Certify es una herramienta en C para enumerar y abusar de configuraciones incorrectas en los Servicios de Certificados de Active Directory AD CS. @harmj0y y @tifkin son los autores principales de Certify y de la investigación asociada sobre AD CS blog y whitepaper. Tabla de Contenidos...

pe-sieve

Intro PE-sieve is a tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory patches...

CVE-2023-38408

CVE-2023-38408 Slide and source code for CS-782 attack presentation...

CVE-2026-54121-CertiGhost

CVE-2026-54121 Certighost - patched fork A working fork of the proof-of-concept tool for CVE-2026-54121, also known as Certighost. Original research and PoC by @H0j3n and @aniqfakhrul detailed analysis at: https://gist.github.com/H0j3n/a5ef2609b5f2944ac2390a191a534c26. This fork fixes the SAN...

CVE-2026-54121-PoC-Exploit

CVE-2026-54121 - AD CS "Certighost" Elevation of Privilege Framework-Toolkit Active Directory Certificate Services — Certighost → Domain Takeover Exploit Framework & Audit Toolkit For authorized security testing only. --- ⚖️ Legal Disclaimer & Responsible Use This tool is provided for educational...

CVE-2024-49019-rayng

Explotando CVE-2024-49019: Escalada de Privilegios en la Autoridad de Certificación Descripción General CVE-2024-49019 es una vulnerabilidad en los Servicios de Certificado de Active Directory AD CS que permite a un atacante escalar privilegios mediante el uso indebido de la autenticación basada ...

CVE-2022-26923-rayng

Exploiting CVE-2022-26923: Certificate Authority Privilege Escalation Overview CVE-2022-26923 is a vulnerability in Active Directory Certificate Services AD CS that allows an attacker to escalate privileges by misusing certificate-based authentication. This guide outlines the steps to exploit thi...

PSPKIAudit

PSPKIAudit Kit de herramientas de PowerShell para auditar Active Directory Certificate Services AD CS. Está construido sobre el kit de herramientas PSPKI Microsoft Public License de PKISolution. Este repositorio contiene una versión más reciente de PSPKI que la disponible en PSGallery consulte el...

Metasploit-CVE-2026-54121-Certighost

Metasploit-CVE-2026-54121-Certighost Certighost originally discovered and exploited by h0j3n and Aniq Fakhrul. This repo contains Metasploit auxiliary module that escalates from any low-privileged domain user to full domain compromise by abusing the AD CS enrollment "chase" fallback. The CA can b...

ADCSPwn

ADCSPwn A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts Petitpotam and relaying to the certificate service. Usage Run ADCSPwn on your target network. root@kitploit: Author: @batsec - MDSec ActiveBreach Contributor: @Flangvik - TrustedSec...

CVE-2021-26121

Vulnerabilidad de Ejecución Remota de Código por Inyección de Plantillas del Lado del Servidor en CS-Cart templates.manage Descubierto por: Steven Seeley de 360 Vulcan Team Versión: = 4.12.x última Fecha: 2021-01-08 12:49 CVE: CVE-2021-26121 Cronología de Divulgación 2021-01-26 – Enviado al equip...

CVE-2022-26923

CVE-2022-26923 As described by Tenable: Active Directory Domain Services Elevation of Privilege Vulnerability CVSS v3 Base score: 8.8 Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Severity: High Summary: CVE-2022-26923 exploits a vulnerability in Microsoft Active Directory Certificate...

CVE-2022-26923

CVE-2022-26923 – Certifried Exploit AD CS Abuse Automated exploitation of CVE-2022-26923 Certifried , enabling privilege escalation through abuse of Active Directory Certificate Services AD CS, with an automatic fallback to Resource-Based Constrained Delegation RBCD, ultimately dumping the NTLM...

CVE-2026-54121

👻 CVE-2026-54121 — CertiGhost Active Directory Certificate Services AD CS Privilege Escalation 👋 Overview CVE-2026-54121 "Certighost" is a high-severity privilege escalation vulnerability affecting Microsoft Active Directory Certificate Services AD CS. The vulnerability allows an authenticated...

POC-CVE-2026-54121-Certighost

CertiGhost CVE-2026-54121 - AD CS Chase Fallback Exploit Toolkit Overview CertiGhost is a critical vulnerability CVSS 8.8 in Active Directory Certificate Services AD CS that allows a low-privileged domain user to impersonate a Domain Controller and achieve full domain compromise. CVE:...

cs-get-last-error

cs-get-last-error Obtain error messages from GetLastError codes directly inside the Cobalt Strike client without the help of Google search, net helpmsg, or Microsoft Error Lookup Tool. The error messages are included in the aggressor script, and no interaction with the beacon is required. The...