ly4k/Certipy
Tool for Active Directory Certificate Services enumeration and abuse observed · 2026-08-28
Health v2 · maintenance only
94/100
- Activity 95
- Release rhythm 90
- Longevity 100
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.
- gap_med: 28
- age_days: 1792
- days_rel: 71
- days_push: 35
- n_releases_24m: 6
Adoption not part of the score
3643 stars · 486 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded
Certipy is a Python CLI toolkit for enumerating and abusing Active Directory Certificate Services (AD CS) misconfigurations. It detects and exploits all known ESC1-ESC17 attack paths, including certificate forgery, NTLM relay to AD CS endpoints, and certificate mapping attacks.
Use cases
- enumerate certificate authorities and templates in active directory
- find adcs misconfigurations for privilege escalation
- forge certificates to escalate privileges in a domain
- relay ntlm authentication to adcs http endpoints
- perform shadow credentials attacks
- audit adcs security as a defender
When to choose
- you are a pentester or red teamer assessing AD CS in a Windows domain
- you need detection and exploitation of ESC1-ESC17 vulnerabilities in one tool
- you want to request, forge, or authenticate with certificates against Active Directory
When to avoid
- you need a defensive monitoring or hardening solution rather than an attack toolkit
- your environment does not use Active Directory Certificate Services
- you lack explicit authorization to test the target environment
Facets
cli-tool · maturity active
security penetration-testing vulnerability-scanning cli security penetration-testing developer-tools windows python cli adcs pki active-directory red-team certificate-services esc1-esc17 ntlm-relay golden-certificate shadow-credentials linux macos
1 source
- readme: https://github.com/ly4k/Certipy · fetched 2026-08-28 · 47a397897530
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| ly4k/Certipy | main | 94 |
For agents
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem