#
esc1
Here are 3 public repositories matching this topic...
Linux-native AD CS enumeration framework covering ESC1–ESC16. Enumerates certificate templates, ACLs, OID-to-group mappings, and escalation chains against Active Directory Certificate Services.
windows linux active-directory pki penetration-testing red-team impacket adcs esc1 certificate-services
-
Updated
Jun 10, 2026 - Python
Build-it-then-break-it Active Directory lab: one `vagrant up` provisions a Domain Controller, Enterprise CA, Windows 10 and Kali on libvirt/KVM, then you exploit AD CS ESC1 end-to-end (enumerate → cert-as-admin → PKINIT → DCSync). Learn how a pentest really works by building the target and breaking it.
ansible vagrant active-directory infrastructure-as-code pentesting libvirt red-team adcs esc1 security-lab
-
Updated
Jun 22, 2026 - PowerShell
Add this topic to your repo
To associate your repository with the esc1 topic, visit your repo's landing page and select "manage topics."