Pentester PSA: Check your Active Directory Certificate Services (AD CS) For Vulnerabilities

• Certipy

  9 2,145 4.3 Python

  Tool for Active Directory Certificate Services enumeration and abuse

I definitely recommend running Certipy or Certify (compiled binary) to see if you can identify any vulnerabilities in your environment. As far as I know, this stuff won't come up on a Nessus scan. I know when I was a sysadmin I set this up insecurely (has now been fixed). However, AD CS is easy to set up ADCS knowing some of the security implications of the configurations.

• Certify

  5 1,375 0.0 C#

  Active Directory certificate abuse. (by GhostPack)

  

I definitely recommend running Certipy or Certify (compiled binary) to see if you can identify any vulnerabilities in your environment. As far as I know, this stuff won't come up on a Nessus scan. I know when I was a sysadmin I set this up insecurely (has now been fixed). However, AD CS is easy to set up ADCS knowing some of the security implications of the configurations.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• Ghostpack-CompiledBinaries

  1 1,014 10.0

  Compiled Binaries for Ghostpack (.NET v4.0)

I definitely recommend running Certipy or Certify (compiled binary) to see if you can identify any vulnerabilities in your environment. As far as I know, this stuff won't come up on a Nessus scan. I know when I was a sysadmin I set this up insecurely (has now been fixed). However, AD CS is easy to set up ADCS knowing some of the security implications of the configurations.

• CVE-2022-26923_AD-Certificate-Services

  1 40 10.0

  The vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment with the Active Directory Certificate Services (AD CS) server role installed.

I'm guessing there are multiple CVEs as it's a whole class of vulnerabilities. Here is one though... CVE-2022-26923.

• Locksmith

  3 690 9.3 PowerShell

  A small tool built to find and fix common misconfigurations in Active Directory Certificate Services. (by TrimarcJake)

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

Suggest a related project