Tag: ADCS

All the articles with the tag "ADCS".

• Active Directory Certificate Services: Abusing ADCS ESC11 (RPC Relay)

  28 Jun, 2026

  Exploitation of ADCS ESC11 through unencrypted RPC ICertPassage interfaces via NTLM relaying to compromise Active Directory environments.

• Active Directory Certificate Services: Abusing ADCS ESC8 (NTLM Relay)

  9 Jun, 2026

  Step-by-step walkthrough of ADCS ESC8 exploitation over HTTP Web Enrollment using NTLM Relay for full Active Directory domain escalation.