AD Certificate Services

Golden Certificate and OCSP

GitHub - GhostPack/ForgeCert: "Golden" certificates

GitHub - bats3c/ADCSPwn: A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

Reflections on certificates, Part 1