Exploit ESC8 (ADCS)

List All PKI Enrollment Servers

nxc ldap <ip> -u user -p pass -M adcs

List All Certificates Inside a PKI

nxc ldap <ip> -u user -p pass -M adcs -o SERVER=xxxx

Helpful Resources

https://www.fortalicesolutions.com/posts/adcs-playing-with-esc4www.fortalicesolutions.com

GitHub - zer1t0/certi: ADCS abuserGitHub

https://ppn.snovvcrash.rocks/pentest/infrastructure/ad/ad-cs-abuseppn.snovvcrash.rocks