ADCS

PRIMARY CATEGORY → WINDOWS MOVEMENT

Components ⟡

• 
  • ESC8
• 
  • ESC15
• 
  • ESC16

---

Enumeration - UNIX-Like

Certipy

Certipy

certipy find -dc-ip '<DC_IP>' -username '<USER>' -password '<PASSWD>' -stdout -vulnerable

Netexec

Netexec

nxc ldap DC01 --username '<USER>' --password '<PASSWD>' --module adcs

Rusthound-CE

Rusthound-CE

rusthound-ce --domain '<DOMAIN>' --ldapusername '<USER>' --ldappassword '<PASSWD>' --ldapip '<DC_IP>' --zip --collectionmethod All

---

Enumeration - Windows