MIT License

项目介绍

ly4k/Certipy 是一个托管在 GitHub 上的开源项目,主要使用 Python 编写,采用 MIT License 许可证,目前获得 3.7k 个 Star、493 次 Fork。

仓库全名
ly4k/Certipy
开源许可证
MIT License
Star 数
3.7k
Fork 数
493
未关闭 Issue
38

README 摘要

Certipy - AD CS Attack & Enumeration Toolkit Certipy is a powerful offensive and defensive toolkit for enumerating and abusing Active Directory Certificate Services (AD CS). It helps red teamers, penetration testers, and defenders assess AD CS misconfigurations - including full support for identifying and exploiting all known ESC1-ESC17 attack paths. [!WARNING] Use only in environments where you have explicit…

完整内容见 GitHub 原始 README 或本页 。

常见问题

Certipy 用什么语言开发?

主要使用 Python 编写,采用 MIT License 许可证,目前有 3.7k 个 Star。

Certipy 可以免费商用吗?

仓库采用 MIT License 许可证,可免费使用与修改,商业使用请遵守许可证条款(例如保留版权声明与许可声明)。

如何获取 Certipy 的源码?

可以直接克隆仓库:git clone https://github.com/ly4k/Certipy.git,默认分支为 main;安装与运行步骤见仓库 README。

Certipy 最近还在维护吗?

仓库最近一次更新为 7月30日,当前有 38 个未关闭 Issue;Star 数为 3.7k,可作为社区活跃度的参考。

关于

GitHub 原始描述(英文)

Tool for Active Directory Certificate Services enumeration and abuse

描述取自 GitHub 官方 API,保持仓库作者书写的原文。

简要分析

热度分
4740
价值分
2381
活跃状态
活跃

语言占比

Python

Release

README

Certipy - AD CS Attack & Enumeration Toolkit

PyPI version Python License

Certipy is a powerful offensive and defensive toolkit for enumerating and abusing Active Directory Certificate Services (AD CS). It helps red teamers, penetration testers, and defenders assess AD CS misconfigurations - including full support for identifying and exploiting all known ESC1-ESC17 attack paths.

Warning 警告

Use only in environments where you have explicit authorization. Unauthorized use may be illegal.


🔍 Features

  • 🔎 Discover Certificate Authorities and Templates
  • 🚩 Identify misconfigurations
  • 🔐 Request and forge certificates
  • 🎭 Perform authentication using certificates
  • 📡 Relay NTLM authentication to AD CS HTTP(S)/RPC endpoints
  • 🗝️ Support for Shadow Credentials, Golden Certificates, and Certificate Mapping Attacks
  • 🧰 And much more!

📚 Full Wiki & Documentation

Read the full step-by-step usage guide, including installation, vulnerability explanations, examples, and mitigations in the 📘 Certipy Wiki.


⚙️ Installation

See the Installation Guide for instructions on how to install Certipy.


🚀 Quick Start

See the Quick Start Guide for a quick overview of the most common commands and usage examples.


🎯 Supported AD CS Vulnerabilities

Certipy supports detection and exploitation of AD CS vulnerabilities across the full range of ESC1-ESC17.

For detailed explanations and exploitation steps, refer to the Certipy Wiki.


📎 Resources

See the Resources for selection of key resources related to AD CS security.


🤝 Contributing

Contributions are welcome! See CONTRIBUTING.md for guidelines on reporting issues, improving documentation, or submitting pull requests.


🌟 Sponsors

Thanks to these generous sponsors for supporting the development of this project. Your contributions help sustain ongoing work and improvements.

User avatar: mxrch

👤 Author

Developed by @ly4k, with valuable contributions from the community.


📘 Wiki

📖 Visit the Certipy Wiki for detailed documentation, usage examples, ESC vulnerability breakdowns, and mitigation advice.

评论

暂无评论