GhostPack / Certify

Active Directory certificate abuse.
Other
1.5k stars 206 forks source link

Extended request command #10

Open daem0nc0re opened 2 years ago

daem0nc0re commented 2 years ago

Hi.

To prevent the trouble of converting pem output with openssl, I added the functionality to output pfx in Base64 format to the request command. The added options are following:

I also extended /enrollcert option to accept Base64 pfx string like Rubeus. As far as I tested, my changes work well for ESC1 and ESC3 senarios in my environment.