Active Directory Certificate Services

Named by 6 kept items in this workspace.

Search every workspace for Active Directory Certificate Services. It matches the name as written, so it can find other things that share it.

The items that name it 6

From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths
writeup2026-10-30
Best practices for integrating IAM Roles Anywhere with your PKI
article2026-10-21It is written here as Active Directory Certificate Services (example PKI tool).
example PKI tool
Living off The Browser: Running Popular Hacking Tools Inside Chrome
writeup2026-10-06It is written here as Active Directory Certificate Services (ADCS).
Checked via Certipy for ESC1 vulnerability to escalate privileges to domain admin
ADScanPro/Claude-AD
repo2026-08-24It is written here as Active Directory Certificate Services (ADCS).
Vulnerable to ESC1 through ESC17 misconfiguration-based attacks
aniqfakhrul/CVE-2026-54121
repo2026-07-23It is written here as Active Directory Certificate Services (AD CS).
Certificate Authority (CA) that can be tricked into issuing a certificate belonging to a Domain Controller; affected further when CA honors request-supplied SANs (EDITF_ATTRIBUTESUBJECTALTNAME2 / ESC6)
Tear Down The Castle - Part 1
writeup2025-01-19It is written here as Active Directory Certificate Services (AD CS).
Vulnerable certificate templates allow impersonation of domain administrators

All technologies in this workspace.