197 matches found
PKINITtools
PKINIT tools This repository contains some utilities for playing with PKINIT and certificates. The tools are built on minikerberos and impacket. Accompanying blogpost with more context: https://dirkjanm.io/ntlm-relaying-to-ad-certificate-services/ Installation These tools are only compatible with...
TryHackMe-CVE-2022-26923
TryHackMe-CVE-2022-26923 Walkthrough on the exploitation of CVE-2022-26923, a vulnerability in AD Certificate Services CVE-2022-26923 TryHackMe | CVE-2022-26923 Task 1 Introduction Security Update Guide - Microsoft Security Response Center TryHackMe | Active Directory Basics Certified Pre-Owned...
CVE-2026-54121-Certighost
🛡 AI Security Tool Module CVE-2026-54121: Active Directory Certificate Services Impersonation Certighost Official Security Audit Module for AI Security Tool Ecosystem 🌐 Web Demo • 📚 Project Website • 💬 Community Chat Website Navigation: Home • Updates • Downloads • Modules 🧠 Conceptual Overview...
CVE-2022-26923
CVE-2022-26923 Description This vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment with the Active Directory Certificate Services AD CS server role installed. It is mainly related to the Active Directory Certificate...
CVE-2022-26923_AD-Certificate-Services
CVE-2022-26923 AD Certificate Services Date of publication : 10/05/2022 Attack complexity: Low Privileges required: Low CVSS Score : 8.1 The vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment with the Active Directo...
Locksmith
Locksmith | | | | |/ | | | | | | || | || | | \ | | | | | | | | .--. .--. .--. /.-. '----------. /.-. '----------. /.-. '----------. '-' .---'-''-'-' '-' .--'--''-'-' '-' .--'--'-''-' '--' '--' '--' A small tool built to find and fix common misconfigurations in Active Directory Certificate...
CVE-2026-54121
🛡️ CVE-2026-54121 — Certighost CTI Investigation Active Directory Certificate Services Privilege Escalation / Domain Compromise Risk Created by Pratik Chhetri Report Date: 2026-07-28 📌 Executive Snapshot Field| Finding ---|--- CVE| CVE-2026-54121 Name| Certighost Vendor| Microsoft Component| Activ...
Exploit for CVE-2025-27740
AD CS SKI hijack — a working exploit for CVE-2025-27740 Tooli...
certipy-merged
certipy-merged This repository contains a fork of ly4k/Certipy with many open pull requests merged, made compatible with each other, and tested to a certain degree. As this is a work in progress , some features may or may not work as expected and things might break. Installation Using pipx...
Windows Server 2025 Active Directory Certificate Services Subject Key Identifier Injection
Windows Server 2025 Active Directory Certificate Services contains a weak authentication issue that allows an authorized attacker to inject an arbitrary Subject Key Identifier into a certificate signing request. https://packetstorm.news/download/237875...
Exploit for Improper Authorization in Microsoft
certighost – NXC module for CVE-2026-54121 NetExec NXC...
Active Directory Certificate Services CA Chase Configuration Checker
The Certighost NetExec SMB module checks Active Directory Certificate Services configuration for the EDITFATTRIBUTESUBJECTALTNAME2 chase flag associated with CVE-2026-54121...
CVE-2026-83666
Concurrent execution using shared resource with improper synchronization 'race condition' in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...
EUVD-2026-99320
Concurrent execution using shared resource with improper synchronization 'race condition' in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...
CVE-2026-83666
A race condition vulnerability exists in Active Directory Certificate Services (AD CS) due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to perform a local privilege elevation . No specific version numbers or remediation ste...
Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...
PT-2026-112472
Concurrent execution using shared resource with improper synchronization 'race condition' in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83666: Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...
CVE-2026-83666: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...