daemon-sec-cheatsheet

The cheatsheet vault for operators: AD, enumeration, exploitation, priv-esc, web, DFIR
git clone https://git.daemon-sec.xyz/daemon-sec-cheatsheet.git
Log | Files | Refs | README | LICENSE

ad-adcs-esc.md (1625B)

      1 ---
      2 title: "Active Directory - Certificate ESC Attacks"
      3 section: "Active Directory"
      4 sectionSlug: "active-directory"
      5 sourcePath: "docs/active-directory/ad-adcs-esc.md"
      6 sourceUrl: "https://github.com/swisskyrepo/InternalAllTheThings/blob/203bb0c0b290/docs/active-directory/ad-adcs-esc.md"
      7 sha: "203bb0c0b290"
      8 isIndex: false
      9 ---
     10 
     11 # Active Directory - Certificate ESC Attacks
     12 
     13 * [ESC1 - Misconfigured Certificate Templates](/internal/active-directory/ad-adcs-esc01)
     14 * [ESC2 - Misconfigured Certificate Templates](/internal/active-directory/ad-adcs-esc02)
     15 * [ESC3 - Misconfigured Enrollment Agent Templates](/internal/active-directory/ad-adcs-esc03)
     16 * [ESC4 - Access Control Vulnerabilities](/internal/active-directory/ad-adcs-esc04)
     17 * [ESC5 - Vulnerable PKI Object Access Control](/internal/active-directory/ad-adcs-esc05)
     18 * [ESC6 - EDITF_ATTRIBUTESUBJECTALTNAME2](/internal/active-directory/ad-adcs-esc06)
     19 * [ESC7 - Vulnerable Certificate Authority Access Control](/internal/active-directory/ad-adcs-esc07)
     20 * [ESC8 - Web Enrollment Relay](/internal/active-directory/ad-adcs-esc08)
     21 * [ESC9 - No Security Extension](/internal/active-directory/ad-adcs-esc09)
     22 * [ESC10 - Weak Certificate Mapping](/internal/active-directory/ad-adcs-esc10)
     23 * [ESC11 - Relaying NTLM to ICPR](/internal/active-directory/ad-adcs-esc11)
     24 * [ESC12 - ADCS CA on YubiHSM](/internal/active-directory/ad-adcs-esc12)
     25 * [ESC13 - Issuance Policy](/internal/active-directory/ad-adcs-esc13)
     26 * [ESC14 - altSecurityIdentities](/internal/active-directory/ad-adcs-esc14)
     27 * [ESC15 - EKUwu Application Policies - CVE-2024-49019](/internal/active-directory/ad-adcs-esc15)