Certificate Enrollment (Invoke-RubeusCertenroll)

Description

Interacts with AD Certificate Services for certificate enrollment and abuse.

Overview

Interacts with Active Directory Certificate Services (AD CS) for certificate enrollment operations. Supports requesting certificates from specified templates and CAs, which can be used for PKINIT authentication or other certificate-based attacks.

Arguments

Parameter Type Description
Action string The action to perform.
UPN string The User Principal Name for the certificate.
CA string The Certificate Authority to target.
Template string The certificate template to use.
Domain string The target domain.
DC string The domain controller to target.

Additional Parameters

  • CredUser: Alternate credentials username.
  • CredPassword: Alternate credentials password.

Dependencies

  • AD

Operating Systems

  • Windows
Scroll to Top