corpus.blog
Claim your blog
Record · corpus.blog/posts/01a087a2-f7c9-7026-bd1a-9fa720b9b57c

GOAD - part 14 - ADCS 5/7/9/10/11/13/14/15

mayfly277.github.io · published 9 March 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at mayfly277.github.io Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
19
Words captured
3,748

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://github.com/badsectorlabs/ludus_adcs/
github.com
https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-crtd/ec71fd43-61c2-407b-83c9-b52272dec8a1
learn.microsoft.com
https://github.com/JonasBK/Powershell/blob/master/Get-X509IssuerSerialNumberFormat.ps1
github.com
https://www.rbtsec.com/blog/active-directory-certificate-services-adcs-esc5/
rbtsec.com
https://posts.specterops.io/from-da-to-ea-with-esc5-f9f045aa105c
posts.specterops.io
https://github.com/zimedev/certipy-merged.git
github.com
https://github.com/Deloitte-OffSecResearch/Certipy
github.com
https://posts.specterops.io/adcs-esc13-abuse-technique-fda4272fbd53
posts.specterops.io
https://www.thehacker.recipes/ad/movement/adcs/certificate-templates
thehacker.recipes
https://posts.specterops.io/adcs-esc14-abuse-technique-333a004dc2b9
posts.specterops.io
https://www.rbtsec.com/blog/active-directory-certificate-attack-esc7/
rbtsec.com
https://hideandsec.sh/books/cheatsheets-82c/page/active-directory-certificate-services
hideandsec.sh
https://posts.specterops.io/adcs-attack-paths-in-bloodhound-part-3-33efb00856ac
posts.specterops.io
https://www.thehacker.recipes/ad/movement/adcs/
thehacker.recipes
https://www.bulletproof.co.uk/blog/abusing-esc13-from-linux
bulletproof.co.uk
https://www.synacktiv.com/publications/relaying-kerberos-over-smb-using-krbrelayx
synacktiv.com
https://googleprojectzero.blogspot.com/2021/10/using-kerberos-for-authentication-relay.html
googleprojectzero.blogspot.com
Diving Into AD CS: Exploring Some Common Error Messages Read at the source ↗
sensepost.com
https://medium.com/@offsecdeer/adcs-exploitation-series-part-2-certificate-mapping-esc15-6e19a6037760
medium.com
Elsewhere on mayfly277.github.io (36)
https://mayfly277.github.io/posts/GOADv2-pwning-part6/
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_adcs.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_khal_admin_ca.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_extract_ca_key.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc5_ldap_shell.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc5_new_da.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc5_new_da_ondc.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc5_pkinit.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc5_pkinit2.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc5_dcsync.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc5.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc7.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc7_exploit.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc7_confirm.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc9_attribute.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc9_shadowcreds.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc9_changeUPN.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc9_request_cert.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc9_finish.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc10_case1.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc10_case2.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc11_ok.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc11_finish.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc13_certipy.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc13_request_cert.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc13_auth_cert.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc13_exploitok.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc14_addcomputer.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc14_reqcomputer.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc14_certinfos.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc14_finish.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc15.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc15_exploit.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc8_kerberos.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc8_kerberos_auth.png
mayfly277.github.io
https://mayfly277.github.io/assets/blog/GOAD/part14_esc8_ntlm_self_wireshark.png
mayfly277.github.io