active-directory-certificate-services 开源项目推荐（14 个）

jakehildreth /Locksmith

一款小型工具，用于发现并修复 Active Directory 证书服务中的常见错误配置。

ADScanPro /adscan

Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports.

arth0sz /Practice-AD-CS-Domain-Escalation

Introductory guide on the configuration and subsequent exploitation of Active Directory Certificate Services with Certipy. Based on the white paper Certified Pre-Owned.

jakehildreth /Locksmith2

An AD CS toolkit for AD Admins, Defensive Security Professionals, and Filthy Red Teamers

SamErde /No-Cert-Left-Behind

Pull a customizable report of expiring certificates directly from your ADCS Certificate Authorities.

SamErde /Locksmith-dev

A small tool to identify and remediate common misconfigurations in Active Directory Certificate Services

wgerade /AD-Posture

该项目在 GitHub 上没有填写描述

TheOmnilord /ADCS

PowerShell tools for AD CS and EJBCA/MSAE PKI: bulk template validity updates (SC-081), batch CSR submission (.req/.csr/.pem or any PKCS #10 file) with resume-safe tracking, cross-forest template sync (target needs no CA), and offline CEP setup per machine or via GPO. Field-validated with EJBCA; Pester-tested on PowerShell 5.1 & 7.

cheddarsploithenics /homeinfrastructureproject

This is an individual project I did using VMware. I had 3 Windows Server machines and 1 CentOS 7 machine. This project covered the installation and configuration of Active Directory, DNS, Group Policy, Active Directory Certificate Services, Apache, LAMP, Samba File Sharing, BIND DNS, and Windows File Sharing.

4625tracker /ADCS-CDBRP-Provider

Native COM revocation provider for AD CS Online Responder that answers OCSP from a snapshot of the CA certificate database instead of a CRL — revocation shows up in about a minute, with no CRL publication cycle. Bilingual UI, multi-CA, x64/x86/ARM64.

MFisherIT /Sync-CACerts

Synchronize the PKI certs from Entra-Joined to Active Directory.

sechive-labs /Vulnerable-ADCS

Create a vulnerable Active Directory Certificate Services (AD CS) environment that allows you to test the most common AD CS attacks (ESC1 to ESC8) in a local lab.

rovingclimber /adcs-enrollment-broker

A policy-enforcing registration-authority broker between native Windows certificate-enrollment clients and Microsoft AD CS.

jakehildreth /blog

My blog.