cyberstars
cyberstars / tools / passthecert-rs

PassTheCert-rs

—

Certificate-based LDAP/S authentication and AD abuse in Rust.

Cross-platform, pure-Rust implementation of the PassTheCert technique. Authenticates to an LDAP/S server with a client certificate through Schannel — no password, NT hash or PKINIT — then runs LDAP actions such as RBCD, Shadow Credentials, machine account and group management, and BloodHound-CE collection.