Active Directory Certificate Services Enumeration (ADCS)

Tools: certipy

Commands:

certipy find -u USER@DOMAIN -p PASSWORD -dc-ip DC_IP (Enumerate for ADCS vulnerabilities. Go to ADCS exploitation section for further usage)