WEBVTT

00:00:00.340 --> 00:00:08.900
Welcome to Pluralsight and this Red Team Tools course featuring Certify,

00:00:08.930 --> 00:00:13.060
the open source Active Directory Certificate Services abuse tool written and

00:00:13.060 --> 00:00:17.250
maintained by Will Schroeder and Lee Christensen. As a red team operator,

00:00:17.250 --> 00:00:20.590
you're constantly on the lookout for new tools and techniques that can help

00:00:20.590 --> 00:00:24.170
you establish persistence and elevate your privileges to facilitate lateral

00:00:24.170 --> 00:00:25.950
movement and achieve your objective.

00:00:26.340 --> 00:00:30.060
As detection tools and methodologies become more advanced, finding new

00:00:30.060 --> 00:00:33.220
ways to achieve these goals without getting caught becomes increasingly

00:00:33.220 --> 00:00:37.260
challenging. Abusing misconfigurations in Active Directory Certificate

00:00:37.260 --> 00:00:40.690
Services to reach those objectives allows you to live off the land and

00:00:40.690 --> 00:00:42.420
hide in normal domain traffic,

00:00:42.540 --> 00:00:46.250
increasing your chances of success without detection. Certify

00:00:46.250 --> 00:00:48.680
interacts with the built‑in Windows tools and services,

00:00:48.690 --> 00:00:52.080
making the same tasks you can perform with these tools simpler and saving

00:00:52.080 --> 00:00:55.790
critical time during your sensitive operations. From environment

00:00:55.790 --> 00:00:59.810
enumeration to certificate requests and even ways to leverage PKI to

00:00:59.810 --> 00:01:03.350
identify administrators, Certify is a simple and powerful Active

00:01:03.350 --> 00:01:05.750
Directory Certificate Services abuse tool.

00:01:06.340 --> 00:01:09.930
So come join me, Kat Seymour, as I take you on an adventure through

00:01:09.930 --> 00:01:13.060
Active Directory Certificate Services abuse with Certify.