Packages and Binaries:

certipy-ad

Offensive tool for enumerating and abusing Active Directory Certificate Services (AD CS).

Installed size: 729 KB
How to install: sudo apt install certipy-ad

Dependencies:
  • python3
  • python3-argcomplete
  • python3-asn1crypto
  • python3-cryptography
  • python3-dnspython
  • python3-dsinternals
  • python3-httpx
  • python3-impacket
  • python3-ldap3
  • python3-openssl
  • python3-pyasn1
  • python3-pycryptodome
  • python3-requests
certipy-ad
root@kali:~# certipy-ad -h
usage: certipy-ad [-v] [-h] [-debug]
                  {account,auth,ca,cert,find,parse,forge,relay,req,shadow,template} ...

Active Directory Certificate Services enumeration and abuse

positional arguments:
  {account,auth,ca,cert,find,parse,forge,relay,req,shadow,template}
                        Action
    account             Manage user and machine accounts
    auth                Authenticate using certificates
    ca                  Manage CA and certificates
    cert                Manage certificates and private keys
    find                Enumerate AD CS
    parse               Offline enumerate AD CS based on registry data
    forge               Create Golden Certificates or self-signed certificates
    relay               NTLM Relay to AD CS HTTP Endpoints
    req                 Request certificates
    shadow              Abuse Shadow Credentials for account takeover
    template            Manage certificate templates

options:
  -v, --version         Show Certipy's version number and exit
  -h, --help            Show this help message and exit
  -debug, --debug       Enable debug output



Updated on: 2025-May-30