ly4k/Certipy
Tool for Active Directory Certificate Services enumeration and abuse observed · 2026-10-21
Health v2 · maintenance only
88/100
- Activity 87
- Release rhythm 83
- Longevity 100
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.
- gap_med: 28
- age_days: 1840
- days_rel: 119
- days_push: 83
- n_releases_24m: 6
Adoption not part of the score
3702 stars · 488 forks observed · 2026-10-21
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded
Certipy is a Python CLI toolkit for enumerating and abusing Active Directory Certificate Services (AD CS) misconfigurations. It detects and exploits all known ESC1-ESC17 attack paths, including certificate forgery, NTLM relay to AD CS endpoints, and certificate mapping attacks.
Use cases
- enumerate certificate authorities and templates in active directory
- find adcs misconfigurations for privilege escalation
- forge certificates to escalate privileges in a domain
- relay ntlm authentication to adcs http endpoints
- perform shadow credentials attacks
- audit adcs security as a defender
When to choose
- you are a pentester or red teamer assessing AD CS in a Windows domain
- you need detection and exploitation of ESC1-ESC17 vulnerabilities in one tool
- you want to request, forge, or authenticate with certificates against Active Directory
When to avoid
- you need a defensive monitoring or hardening solution rather than an attack toolkit
- your environment does not use Active Directory Certificate Services
- you lack explicit authorization to test the target environment
Facets
cli-tool · maturity active
security penetration-testing vulnerability-scanning cli security penetration-testing developer-tools windows python cli adcs pki active-directory red-team certificate-services esc1-esc17 ntlm-relay golden-certificate shadow-credentials linux macos
1 source
- readme: https://github.com/ly4k/Certipy · fetched 2026-10-21 · 47a397897530
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| ly4k/Certipy | main | 88 |
For agents
Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem