Loading…
Certipy is an offensive and defensive toolkit for enumerating and abusing Active Directory Certificate Services (AD CS). It helps red teams, penetration testers, and defenders assess AD CS misconfigurations and identify attack paths (ESC1-ESC16). It supports discovering Certificate Authorities and templates, requesting and forging certificates, certificate-based authentication, NTLM relay to AD CS endpoints, and features like Shadow Credentials, Golden Certificates, and Certificate Mapping Attacks, with a full wiki and installation guide.
AI named Certipy from December 2025 to March 2026.