🧰 Certipy

The items that name it 3

• Living off The Browser: Running Popular Hacking Tools Inside Chrome
  writeup2026-10-06

  ADCS enumeration tool used to find ESC1 vulnerability for privilege escalation

• ADScanPro/Claude-AD
  repo2026-08-24

  Tool for abusing ADCS misconfigurations (ESC1-ESC17)

• dMSA Ouroboros: Self-Sustaining Credential Extraction in Windows Server 2025
  writeup2026-05-04

  Used to perform PKINIT authentication as the dMSA using the planted Shadow Credential certificate (UnPAC-the-hash); credited to Oliver Lyak (ly4k).