Certificate Attacks (ESC1-15)

ESC 1-15: ADCS Attack Techniques Cheatsheet - Google Sheets

Resources:

https://trustedsec.com/blog/ekuwu-not-just-another-ad-cs-esc

Good resource: https://abrictosecurity.com/pentesting-active-directory-certificate-services-adcs-esc1-esc8/

Background on ADCS attacks: https://posts.specterops.io/certified-pre-owned-d95910965cd2

https://www.crowe.com/cybersecurity-watch/exploiting-ad-cs-a-quick-look-at-esc1-esc8

https://www.prosec-networks.com/en/blog/petit-potam-ntlm-relay-angriff/

https://www.youtube.com/watch?v=wJXTg4mK_dI&t=6s

https://www.truesec.com/hub/blog/from-stranger-to-da-using-petitpotam-to-ntlm-relay-to-active-directory

https://luemmelsec.github.io/Skidaddle-Skideldi-I-just-pwnd-your-PKI/#esc8

https://www.blackhillsinfosec.com/abusing-active-directory-certificate-services-part-3/

ESC1

ESC2

ESC3

ESC7

ESC8

ESC11

Certifried