Active Directory Certificate Services (ADCS) privilege escalation (Certifried)

This module exploits a privilege escalation vulnerability in Active
Directory Certificate Services (ADCS) to generate a valid certificate
impersonating the Domain Controller (DC) computer account. This
certificate is then used to authenticate to the target as the DC
account using PKINIT preauthentication mechanism. The module will get
and cache the Ticket-Granting-Ticket (TGT) for this account along
with its NTLM hash. Finally, it requests a TGS impersonating a
privileged user (Administrator by default). This TGS can then be used
by other modules or external tools.