PassTheCert-rs

—

Certificate-based LDAP/S authentication and AD abuse in Rust.

RustMIT

Cross-platform, pure-Rust implementation of the PassTheCert technique. Authenticates to an LDAP/S server with a client certificate through Schannel — no password, NT hash or PKINIT — then runs LDAP actions such as RBCD, Shadow Credentials, machine account and group management, and BloodHound-CE collection.

Does

Exploit Recon

Active Directory

For

Red team Pentest