#1146839 ITP: certipy-ad -- Tool for Active Directory Certificate Services enumeration and abuse

#1146839#5
Date:
2026-09-06 09:33:12 UTC
From:
To:
* Package name    : python-certipy-ad
  Version         : 5.1.0
* URL             : https://github.com/ly4k/Certipy
* License         : MIT
  Programming Lang: Python
  Description     : Tool for Active Directory Certificate Services enumeration and abuse

Powerful offensive and defensive toolkit for enumerating and abusing Active Directory Certificate Services (AD CS). Helps red teamers, penetration testers, and defenders assess AD CS misconfigurations - including full support for identifying and exploiting all known ESC1-ESC17 attack paths.

Features:
- Discover Certificate Authorities and Templates
- Identify misconfigurations
- Request and forge certificates
- Perform authentication using certificates
- Relay NTLM authentication to AD CS HTTP(S)/RPC endpoints
-️ Support for Shadow Credentials, Golden Certificates, and Certificate Mapping Attacks

This is a dependency for netexec, conflicts with existing package python3-certipy. I will maintain this package in the Python team.