Certipy and ADCSync attacks against Active Directory Certificate Services

[@thewifiaddict]

Love the content!

[@internexus1]

Thanks for the walk-through and explanation, solid content!

[@CyberAttackDefense]

Glad you enjoyed it!

[@AdamCysec]

great explanation, thanks for the video. The encoding error for the json file is fixed now, utf-8 json files will now work.

[@CyberAttackDefense]

Nice!

[@christophertharp7763]

and this kali box is ad joined correct? i have an ad joined win10 system runnung virtual box and trying to use certipy on the vm instance and am gaving issues

[@CyberAttackDefense]

No the kali box is not AD joined

[@christophertharp7763]

@@CyberAttackDefense ok, i must be messing up, certi.py keeps saying my creds are not valid but are. thanks for commenting back

[@ferassami3362]

Hi and thanks for the content I have question If template called User Allowing users to enroll and it has client authentication but the user cant specify the san or upn , is it exploitable ? And if yes , how to do that

[@CyberAttackDefense]

It’s not exploitable if the user can’t specify those values.

[@HarvestHaven09]

Nice 👍