Certipy and ADCSync attacks against Active Directory Certificate Services
In this video, I show how to attack Active Directory Certificate Services. I will first show you how to use Certipy to attack ADCS with the ESC1 vulnerability in a certificate template. I will then show you how to use ADCSync (While mispronouncing the tool's name about 50 times) to sync credentials out of AD using ADCS certificates. Reference Links Certified Pre-Owned https://posts.specterops.io/certified... ADCSync https://github.com/JPG0mez/ADCSync Elastic Container Project https://www.elastic.co/security-labs/... Convert UTF8 files to ASCII iconv -f UTF-8 -t ASCII//TRANSLIT input.txt -o output.txt Chapters 00:00 Introduction and Explanation 01:45 Certipy ESC1 08:00 Sharphound/Updog 09:55 Unzip and convert the users.json 13:45 ADCSync 14:15 Catching ADCSync 14:52 Ensuring ADCS Logging is Enabled 17:02 SIEM Rule for Detection of ADCSync 19:54 NTLM Hash dumping 21:37 Outro
Certipy Deep Dive — Escalating via AD CS with ESC4–ESC7
Attacks on Active Directory Certificate Services (AD CS) Explained - Ryan Zagrodnik | CypherCon 7.0
Exploiting Active Directory Certificate Services (ADCS) Using Only Two Tools
TR19: Fun with LDAP and Kerberos: Attacking AD from non-Windows machines
Learning to Hack Active Directory Certificate Services (with Shikata!)
Hacking Common AD Misconfigurations
Crash Course, Active Directory, DHCP & DNS for Entry Level Tech Support
Can Claude Code Hack an Active Directory HTB Machine? (Cicada)
ADCS ESC1 Privilege Escalation Tutorial | Attack Active Directory Certificate Services
IBM FDF virtualization dr demo highlevel
Becoming a Keymaster: Active Directory Certificate Services (ADCS) Attacks
How To Enumerate Active Directory with BloodHound -- (Without Being Overwhelmed!)
🔐 Certify 2.0 & ADCS Certificate Escalations (ESC1–ESC3)
The World's Most Important Machine
Instant Focus Mode – 40Hz Gamma Brainwave Music for Deep Focus & Productivity
Certified Pre-Owned: Abusing Active Directory Certificate Services
ADCS ESC8 Tutorial | Attack Active Directory Certificate Services
![1 - [English] You Do (Not) Understand Kerberos Delegation - Introduction](https://i.ytimg.com/vi/p9QFdITuvgU/hqdefault.jpg?sqp=-oaymwE9CNACELwBSFryq4qpAy8IARUAAAAAGAElAADIQj0AgKJDeAHwAQH4AdQGgALgA4oCDAgAEAEYciBgKCAwDw==&rs=AOn4CLCEfivDF6JwEUt5X1VTi_GQAHcJHw)
1 - [English] You Do (Not) Understand Kerberos Delegation - Introduction
Common Active Directory Attacks: Back to the Basics of Security Practices
