ADCS | writeups.xyz

Title	Vulnerabilities	Programs	Authors
Hello: I’m your ADCS server and I want to authenticate against you	ADCS Authentication Coercion Active Directory Privilege Escalation Internal Pentest	Undisclosed	Ap (@Decoder_it)
ADCS ESC13 Abuse Technique	ADCS Active Directory	Undisclosed	Jonas Bülow Knudsen
From NTAuthCertificates to “Silver” Certificate	ADCS Active Directory Persistence Internal Pentest	Undisclosed	Ap (@Decoder_it)
Anonymised Penetration Test Report	Internal Pentest RCE ADCS Active Directory Kerberos DHCPv6 LLMNR	Undisclosed	Volkis (@VolkisAU)
CertPotato – Using ADCS to privesc from virtual and network service accounts to local system	Local Privilege Escalation ADCS	Microsoft	Hocine Mahtout (@Sant0rryu)
Relaying to AD Certificate Services over RPC	Active Directory ADCS Windows	Undisclosed	Sylvain Heiniger (@Sploutchy)
Certified Pre-Owned	Active Directory Privilege Escalation ADCS Windows	Microsoft	Will Schroeder (@Harmj0y) Lee Christensen (@Tifkin_)

Page 1 of 1