# Enumeração - Autoridade Certificadora

## Windows

Nativo

```
# AD Module
Get-ADObject -Filter * -SearchBase 'CN=Certification Authorities,CN=Public Key Services,CN=Services,CN=Configuration,DC=security,DC=local'

Get-ADObject -LDAPFilter '(objectclass=certificationAuthority)' -SearchBase 'CN=Configuration,DC=security,DC=local' | fl *
```

**Certify**

Github: <https://github.com/GhostPack/Certify>

```
Certify.exe cas 
Invoke-Certify cas
```

## Linux

**Certipy**

Github: <https://github.com/ly4k/Certipy>

```
certipy find -u <user> -p <password> -dc-ip 10.10.10.100 -stdout
```