| Module Name | Locksmith |
|---|---|
| Module Guid | b1325b42-8dc4-4f17-aa1f-dcb5984ca14a |
| Download Help Link | NA |
| Help Version | 2024.11.11 |
| Locale | en-US |
A small tool to find and fix common misconfigurations in Active Directory Certificate Services.
ESC1, ESC2, etc., refer to a series of Active Directory Certificate Services (AD CS) escalation paths, originally documented by Will Schroeder and Lee Christensen in their landmark 2021 research on abusing AD CS titled "Certified Pre-Owned".
These ESC* vulnerabilities are not software vulnerabilities in the traditional sense (like CVEs), but rather misconfigurations or abuse paths that attackers can use to escalate privileges or persist in an environment using AD CS.
A small tool to find and fix common misconfigurations in Active Directory Certificate Services.