adcs

Tool for Active Directory Certificate Services enumeration and abuse

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

Active Directory data ingestor for BloodHound Legacy written in Rust. 🦀

Free Active Directory pentesting tool for Linux. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports. No Windows needed.

Active Directory data ingestor for BloodHound Community Edition written in Rust. 🦀

PowerShell PKI Module

Policy Module for Microsoft Active Directory Certificate Services

A TUI for Active Directory collection.

Introductory guide on the configuration and subsequent exploitation of Active Directory Certificate Services with Certipy. Based on the white paper Certified Pre-Owned.

TokenCert

Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.

An AD CS toolkit for AD Admins, Defensive Security Professionals, and Filthy Red Teamers

Active Directory security-assessment toolkit in Rust — PingCastle-class audit + authorized red-team validation, on a from-scratch DCE/RPC · NTLM · SMB2 · Kerberos stack. One static binary, from Kali or Windows.

PowerShell Module to ease requesting certificates on Windows

Active Directory certificate abuse

Active Directory kerberos attack framworks.

REST API for Microsoft Active Directory Certificate Services

Orbit, Rigid Body Dynamics and Magnetic field simulation for Low-Earth-Orbit Spacecraft

SoK/Whitepaper on Offensive Operations against Active Directory Certificate Service