Curated security research, vulnerabilities, advisories and tools for practitioners.

#adcs

Security coverage tagged adcs.

1.

SpecterOps Skills: Open-Source LLM Agent Skills & Plugins for Red Team Operations

tool | 2026-09-03 19:48 | github.com | original ↗ | #ai-security | #claude-code | #red-team

2.

NetSPI/AD-PathFinder: Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data

tool | 2026-09-02 23:54 | github.com | original ↗ | #pentesting | #open-source | #active-directory

3.

When EPA isn't EPA'ing: What Tools Like Certify, Certipy and checkMSSQLStatus.py miss

blog | 2026-06-24 00:00 | abdulmhsblog.com | original ↗ | #ai-security | #active-directory | #penetration-testing

4.

Fixing ESC4 - User has dangerous permissions

research | 2026-04-30 23:32 | projectblack.io | original ↗ | #remediation | #active-directory | #hardening

5.

Fixing ESC8 - Web Enrollment is enabled over HTTP and HTTPS, and Channel Binding is disabled

research | 2026-04-06 10:59 | projectblack.io | original ↗ | #ai-security | #active-directory | #hardening

6.

ESC8s and Where to Find Them

blog | 2026-03-27 00:00 | abdulmhsblog.com | original ↗ | #pentesting | #vulnerability-research | #active-directory

7.

Fixing ESC1 - Enrollee supplies subject and template allows client authentication

research | 2026-01-13 01:10 | projectblack.io | original ↗ | #cloud | #active-directory | #hardening

8.

Becoming the Machine, A Virtual Account's Guide to Total Control

blog | 2025-10-13 00:00 | abdulmhsblog.com | original ↗ | #active-directory | #privilege-escalation | #adcs

9.

Top 10 Active Directory Risks IFIR Has Caught in the Wild

blog | 2025-05-15 22:03 | semperis.com | original ↗ | #active-directory | #security-assessment | #risk-assessment

10.

Detecting and Mitigating the PetitPotam Attack on Windows Domains

blog | 2021-08-02 18:29 | semperis.com | original ↗ | #active-directory | #mitigation | #adcs