Certipy

Python ADCS attack toolkit — enumerate templates, exploit ESC misconfigs, shadow credentials, PKINIT auth.

Installation

pipx install certipy-ad
# or
pip install certipy-ad

Authentication Syntax

# Password
certipy COMMAND -u user@DOMAIN -p password -dc-ip DC_IP