EN
ENNA

BloodHound vs Certipy

GitHub Stats

2.9k
Stars
3.5k
310
Forks
458
97
Issues
32
1d ago
Updated
1mo ago
Apache-2.0
License
MIT
Go
Language
Python

About BloodHound

BloodHound uses graph theory to reveal hidden and often unintended relationships within an Active Directory or Azure environment. Attackers use BloodHound to identify complex attack paths that would otherwise be impossible to identify. Defenders use it to identify and eliminate those same attack paths. Both red and blue teams can use BloodHound to gain a deeper understanding of privilege relationships in Active Directory environments.

About Certipy

Certipy is a Python tool for enumerating and abusing Active Directory Certificate Services (AD CS). It can identify vulnerable certificate templates, request certificates for privilege escalation, perform ESC1-ESC8 attacks, extract CA private keys, and forge certificates. AD CS misconfigurations are among the most impactful attack paths in modern Active Directory environments, and Certipy automates the entire attack chain from enumeration to exploitation.

Platform Support

🐧linux🍎macos🪟windows
🐧linux🍎macos🪟windows

Tags

Shared

active-directoryprivilege-escalation

BloodHound only

graphattack-path

Certipy only

certificatesadcsesc1-esc8