Certificate Attacks (ESC1-15)

ESC 1-15: ADCS Attack Techniques Cheatsheet - Google Sheets

Resources:

TrustedSec EKUwu: Not just another AD CS ESC

Good resource:

Background on ADCS attacks:

Will Schroeder Certified Pre-Owned

Crowe Exploiting AD CS: A quick look at ESC1 and ESC8 | Crowe LLP

Jannik Petit Potam - NTLM Relay Attack

Truesec Petitpotam Exploit POC

siteadmin From Stranger to DA // Using PetitPotam to NTLM relay to Domain Administrator - Trulysuper

Kassie Kimball Abusing Active Directory Certificate Services (Part 3) - Black Hills Information Security