Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

RTT· red team

RTT · red team

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Search techniques, tools, commands…⌘K

No scenario

No scenario · all techniques in scope

IdleStatus

0Scenarios

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Back to Tools

Certipy

Noise: RESTRICTED_ACCESS_BLUR_MARKER

AD Certificate Abuse

Credentials & User Impersonation

Persistence

Lateral Movement

Certipy is a Python toolkit for enumerating and assessing Active Directory Certificate Services (AD CS), and for authorized testing of AD CS abuse paths. The project documents ESC1–ESC17 analysis, certificate requests and authentication, NTLM relay to AD CS, Shadow Credentials, and Golden Certificate operations. It can expose sensitive CA private keys and enable certificate-based impersonation; those high-impact capabilities require strict authorization and key handling.

Source

https://github.com/ly4k/Certipy

Language

Python

References

github.com github.com raw.githubusercontent.com github.com github.com

+24 more

Extended Details

RESTRICTED_ACCESS_BLUR_MARKER