CertPyre

CertPyre is a modular Python tool designed for identifying and auditing Active Directory Certificate Services (AD CS) misconfigurations.

Currently, it supports enumeration of templates vulnerable to ESC1 (where Enrollee Supplies Subject and Client Authentication are allowed).

Project Structure

• certpyre.py: Main CLI application.
• requirements.txt: Python dependencies.
• core/: Core modules for logging and connectivity.
• modules/: Auditing modules (e.g., esc1_audit.py).

Installation

pip install -r requirements.txt

Usage

python certpyre.py -u "DOMAIN\User" -p "Password123!" -d 192.168.1.100 -b "DC=contoso,DC=local"

Disclaimer

This tool is intended for authorized security auditing and educational purposes only.