Certipy

Purpose

Use this skill for AD CS-focused analysis when the engagement needs to understand certificate-based privilege paths or enrollment weaknesses.

Phase Fit

• Primary: Vulnerability Analysis
• Secondary: Threat Modeling and Test Planning, Retest and Closure

Use When

• Need to enumerate certificate templates or enrollment services.
• Need to assess whether AD CS introduces practical privilege escalation paths.
• Need to retest whether a certificate-related weakness was removed.

Avoid When