ADCSDevilCOM

ADCSDevilCOM Una herramienta en C para solicitar certificados de ADCS utilizando DCOM sobre SMB. Esta herramienta permite solicitar remotamente certificados X.509 desde un servidor de CA usando el protocolo MS-WCCE sobre DCOM y evade el requisito tradicional del endpoint mapper al usar SMB...

Certipy

Certipy - Kit de Ataque y Enumeración de AD CS Certipy es un potente kit ofensivo y defensivo para enumerar y abusar de los Servicios de Certificados de Active Directory AD CS. Ayuda a equipos rojos, testers de penetración y defensores a evaluar configuraciones incorrectas de AD CS, incluyendo...

ludus-defender-lab

Ludus Defender Lab Ludus range config and Ansible roles for a Windows security lab pre-staged for MDE and MDI, with a fully misconfigured ADCS installation for detection coverage testing. Config| VMs| Purpose ---|---|--- zsec-mde-mdi-lab.yml| DC01 + WKS01| MDE/MDI detection lab with ADCS ESC1–ESC...

ADCSync

ADCSsync Esta es una herramienta que preparé rápidamente para realizar un DCSync utilizando ESC1. Es bastante lenta, pero por lo demás es un medio efectivo para realizar un ataque DCSync improvisado sin utilizar DRSUAPI ni Volume Shadow Copy. Esta es la primera versión de la herramienta y...

ADCSKiller

ADCSKiller - Una herramienta de automatización de explotación de ADCS ADCSKiller es una herramienta basada en Python diseñada para automatizar el proceso de descubrir y explotar vulnerabilidades de Servicios de Certificados de Active Directory ADCS. Aprovecha las funciones de Certipy y Coercer pa...

Misconfigured Certificate Template Finder

class MetasploitModule 'Misconfigured Certificate Template Finder', 'Description' = %q This module allows users to query a LDAP server for vulnerable certificate templates and will print these certificates out in a table along with which attack they are vulnerable to and the SIDs that can be used...

ADCSync - Use ESC1 To Perform A Makeshift DCSync And Dump Hashes

This is a tool I whipped up together quickly to DCSync utilizing ESC1. It is quite slow but otherwise an effective means of performing a makeshift DCSync attack without utilizing DRSUAPI or Volume Shadow Copy. This is the first version of the tool and essentially just automates the process of...

AD CS Certificate Template Management

This module can create, read, update, and delete AD CS certificate templates from a Active Directory Domain Controller. The READ, UPDATE, and DELETE actions will write a copy of the certificate template to disk that can be restored using the CREATE or UPDATE actions. The CREATE and UPDATE actions...

ICPR Certificate Management

Request certificates via MS-ICPR Active Directory Certificate Services. Depending on the certificate template's configuration the resulting certificate can be used for various operations such as authentication. PFX certificate files that are saved are encrypted with a blank password. This module ...

Misconfigured Certificate Template Finder

This module allows users to query a LDAP server for vulnerable certificate templates and will print these certificates out in a table along with which attack they are vulnerable to and the SIDs that can be used to enroll in that certificate template. Additionally the module will also print out a...