Skip to content
When EPA isn't EPA'ing: What Tools Like Certify, Certipy and checkMSSQLStatus.py miss
abdulmhsblog.com | blog | #ai-security | #active-directory | #penetration-testing | #pentest | #adcs | #esc8 | #ntlm-relay | #epa | #certipy | #ad-cs
Summary
A pentester notes Certify and Certipy can misjudge ESC8 NTLM relay exposure: even with EPA enabled, AD CS Web Enrollment may stay relayable when channel or service binding isn't configured right.
- Published
- Collected