root/Tools/Techniques
source
::tools

Active Directory Certificate Services (ADCS)

Attack techniques.

Updated
2020-07-08
Trust
Review due
#Techniques

Follow references, sections, and shared topics to continue the investigation.

References this noteCerti

Utility to play with ADCS, allows to request tickets and collect information about related objects.

References this notePSPKIAudit

PowerShell toolkit for auditing Active Directory Certificate Services (AD CS).

Parent sectionTechniques

Attack techniques.

Child noteESC1

ESC1 - Abuse Active Directory Certificate Services.

Child noteESC8

ESC8 - Abuse Active Directory Certificate Services.

Shared tagsBackupOperatorToDA

From Backup Operator To Domain Admin.

Shared tagsKerberoasting

Abusing the kerberos protocol to gain KRBTG hashes to crack.

Shared tagsKrbRelayUp

A universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).