AD CS: from ManageCA to RCE
Disclosure of two novel techniques to compromise a CA server by abusing the ManageCA permissions (AD CS)
Certify
AD CS: weaponizing the ESC7 attack
Research and tooling development around the ESC7 attack (AD CS)
Disclosure of two novel techniques to compromise a CA server by abusing the ManageCA permissions (AD CS)
Research and tooling development around the ESC7 attack (AD CS)