active-directory-certificate-services
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides extensive command-line examples for specialized security tools such as certipy, ntlmrelayx.py, and Certify.exe to interact with Active Directory services and perform certificate-based authentication requests.
- [PRIVILEGE_ESCALATION]: The instructions detail methods to escalate privileges from low-privileged users to Domain Administrator by exploiting certificate template misconfigurations (ESC1-ESC4, ESC7, ESC13) and CA settings (ESC6).
- [PERSISTENCE]: The skill describes persistence techniques including the extraction of CA private keys to forge certificates (Golden Certificate) that allow long-term impersonation of any user within the domain.
Audit Metadata