Packages and Binaries:
certipy-ad
Offensive tool for enumerating and abusing Active Directory Certificate Services (AD CS).
Installed size: 729 KB
How to install: sudo apt install certipy-ad
Dependencies:
- python3
- python3-argcomplete
- python3-asn1crypto
- python3-cryptography
- python3-dnspython
- python3-dsinternals
- python3-httpx
- python3-impacket
- python3-ldap3
- python3-openssl
- python3-pyasn1
- python3-pycryptodome
- python3-requests
certipy-ad
root@kali:~# certipy-ad -h
usage: certipy-ad [-v] [-h] [-debug]
{account,auth,ca,cert,find,parse,forge,relay,req,shadow,template} ...
Active Directory Certificate Services enumeration and abuse
positional arguments:
{account,auth,ca,cert,find,parse,forge,relay,req,shadow,template}
Action
account Manage user and machine accounts
auth Authenticate using certificates
ca Manage CA and certificates
cert Manage certificates and private keys
find Enumerate AD CS
parse Offline enumerate AD CS based on registry data
forge Create Golden Certificates or self-signed certificates
relay NTLM Relay to AD CS HTTP Endpoints
req Request certificates
shadow Abuse Shadow Credentials for account takeover
template Manage certificate templates
options:
-v, --version Show Certipy's version number and exit
-h, --help Show this help message and exit
-debug, --debug Enable debug output
Updated on: 2025-May-30