GhostPack/Certify

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

2023 stars · 281 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Certify is a C# command-line tool for enumerating and abusing misconfigurations in Active Directory Certificate Services (AD CS). It was released alongside SpecterOps' 'Certified Pre-Owned' AD CS research at Black Hat 2021.

Use cases

• enumerate vulnerable AD CS certificate templates
• abuse Active Directory Certificate Services misconfigurations
• find escalation paths via misconfigured certificate templates
• request certificates for privilege escalation in a domain
• audit AD CS configuration for security issues
• run certificate abuse tooling in-memory via PowerShell

When to choose

• you are performing authorized penetration testing or red team assessments against Windows Active Directory environments
• you need to enumerate or exploit AD CS template misconfigurations
• you want a C# tool that can be loaded reflectively through PowerShell or PSRemoting

When to avoid

• you need defensive-only auditing with a formal report rather than abuse capabilities
• you cannot compile from source, since no binaries are released
• your target environment is not Windows Active Directory with AD CS deployed

Facets

cli-tool · maturity active

security penetration-testing cli security penetration-testing windows windows dotnet cli active-directory ad-cs certificate-services red-team privilege-escalation csharp

Member repositories

For agents

markdown · JSON · MCP: product_card(name="GhostPack/Certify")