modifyCertTemplate

목적 이 도구는 운영자가 ADCS 인증서 템플릿을 수정하여 생성된 취약 상태를 권한 상승에 활용할 수 있도록 지원하고, 이후 템플릿을 이전 상태로 재설정하기 위해 설계되었습니다. 이는 특히 템플릿에 대한 WriteProperty 권한이 침해되었지만, 연산자가 해당 권한이 적용되는 속성을 확신하지 못하는 시나리오를 위해 고안되었습니다. 이러한 시나리오에서 템플릿의 ACL을 쿼리하고 적용 가능한 ACE 정보를 속성 GUID와 교차 참조하여 수정 가능한 속성을 확인할 수 있습니다. 도구와 주제에 관한 관련 블로그 게시물. 사용법...

Certiception

Certiception Certiception은 ADCSActive Directory Certificate Services를 위한 허니팟입니다. 실제처럼 보이고 매력적인 미끼로 공격자를 유인하여 관련성이 높은 경보를 트리거하도록 설계되었습니다. SRLabs 레드팀이 개발한 Certiception은 ADCS 환경에 취약해 보이는 인증서 템플릿을 만들고, 악용을 방지하기 위한 제한을 설정하며, 효과적인 알림 구성을 지원합니다. 원래 Troopers24에서 공개된 Certiception은 효과적인 디셉션에 대한 전략 가이드인 레드팀...

GO-2026-4561 Fleet: Authorization Bypass in certificate template batch deletion for team administrators in github.com/fleetdm/fleet

Fleet: Authorization Bypass in certificate template batch deletion for team administrators in github.com/fleetdm/fleet...

Fleet 安全漏洞

Fleet is an open-source device management platform developed by Fleet Device Management. It supports various operating systems and devices, and helps IT and security teams with device management, vulnerability reporting, MDM operations, etc. Versions of Fleet prior to 4.80.1 contained security...

PT-2026-6558

Name of the Vulnerable Software and Affected Versions Thales SafeNet Agent for Windows Logon versions 4.0.0 through 4.1.2 Description A flaw exists in the certificate validation process within SafeNet Agent for Windows Logon on Windows, potentially enabling signature spoofing. This issue stems fr...

RockyLinux 9 : gnutls (RLSA-2025:16116)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:16116 advisory. gnutls: Vulnerability in GnuTLS certtool template parsing CVE-2025-32990 gnutls: Vulnerability in GnuTLS SCT extension parsing CVE-2025-32989 gnutls:...

RLSA-2025:16115 Moderate: gnutls security, bug fix, and enhancement update

The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fixes: gnutls: Vulnerability in GnuTLS certtool template parsing CVE-2025-32990 gnutls: Vulnerability in GnuTLS SCT extension...

Metasploit Wrap-Up 07/11/2025

Active Directory LDAP Library This week Metasploit added a library for working with Active Directory Domain Controllers over LDAP. The library consolidates common functionality and implements a caching mechanism to support common operations such as looking up objects by their DN, sAMAccountName, ...

ESC8 Relay: SMB to HTTP(S)

This module creates an SMB server and then relays the credentials passed to it to an HTTP server to gain an authenticated connection. Once that connection is established, the module makes an authenticated request for a certificate based on a given template. Module Options msf use...

AD CS Certificate Template Management

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'AD CS Certificate Template Management', 'Description' = %q This module can create, read, update, and delete AD CS certificate templates from a...

AD CS Certificate Template Management

This module can create, read, update, and delete AD CS certificate templates from a Active Directory Domain Controller. The READ, UPDATE, and DELETE actions will write a copy of the certificate template to disk that can be restored using the CREATE or UPDATE actions. The CREATE and UPDATE actions...

Failed to Publish FAS Certificate Template with "RPC server unavailable. 0x800706ba"

Failed to publishFAS certificate Template with"An error occurred: CCertAdmin::GetCAProperty:RPC server unavailable. 0x800706ba". On Domain Controller,there is an error message in Event Log "RPCCAUTHNLEVELPKTINTEGRITY"and EventID is 10036...