module

AD CS Certificate Template Management

Try Surface Command
Back to search
Disclosed
N/A
Created
2023-05-22

Description

This module can create, read, update, and delete AD CS certificate templates from a Active Directory Domain
Controller.

The READ, UPDATE, and DELETE actions will write a copy of the certificate template to disk that can be
restored using the CREATE or UPDATE actions. The CREATE and UPDATE actions require a certificate template data
file to be specified to define the attributes. Template data files are provided to create a template that is
vulnerable to ESC1, ESC2, ESC3 and ESC15.

This module is capable of exploiting ESC4.

Authors

Will Schroeder
Lee Christensen
Oliver Lyak
Spencer McIntyre

References

Module Options

To display the available options, load the module within the Metasploit console and run the commands ‘show options’ or ‘show advanced’:


    msf > use auxiliary/admin/ldap/ad_cs_cert_template
    msf auxiliary(ad_cs_cert_template) > show actions
        ...actions...
    msf auxiliary(ad_cs_cert_template) > set ACTION < action-name >
    msf auxiliary(ad_cs_cert_template) > show options
        ...show and set options...
    msf auxiliary(ad_cs_cert_template) > run
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today