Certipy Versions Save

What's Changed

• Allow weak TLS ciphers in LDAP connection by @AdrianVollmer in https://github.com/ly4k/Certipy/pull/110
• Adds ESC11, missing IF_ENFORCEENCRYPTICERTREQUEST flag by @sploutchy in https://github.com/ly4k/Certipy/pull/105
• Added minimum RSA key length to template attributes by @raosridhar in https://github.com/ly4k/Certipy/pull/107
• Fix template command doesn't update template when appending values to existing attributes by @CykuTW in https://github.com/ly4k/Certipy/pull/103

New Contributors

• @sploutchy made their first contribution in https://github.com/ly4k/Certipy/pull/105
• @raosridhar made their first contribution in https://github.com/ly4k/Certipy/pull/107
• @CykuTW made their first contribution in https://github.com/ly4k/Certipy/pull/103

Full Changelog: https://github.com/ly4k/Certipy/compare/4.1.0...4.2.0

What's Changed

• Fix the vulnerable template "Flags" attribute in order to work with Schannel (PassTheCert) by @antuache in https://github.com/ly4k/Certipy/pull/69
• certipy auth: Output LM hash by @rtpt-erikgeiser in https://github.com/ly4k/Certipy/pull/71
• Adding CAs to template properties. by @shikatano in https://github.com/ly4k/Certipy/pull/87
• Fixed authentication bug caused by Windows update

New Contributors

• @antuache made their first contribution in https://github.com/ly4k/Certipy/pull/69
• @rtpt-erikgeiser made their first contribution in https://github.com/ly4k/Certipy/pull/71
• @shikatano made their first contribution in https://github.com/ly4k/Certipy/pull/87

Full Changelog: https://github.com/ly4k/Certipy/compare/4.0.0...4.1.0

What's Changed

• Schannel authentication for LDAPS
• SSPI / Integrated Windows authentication
• New BloodHound format for forked version
• Improved text and JSON output for find with vulnerable templates and CAs, and ability to hide administrators and non-vulnerable templates
• Both UPN and DNS SAN are supported for certificates instead of old -alt
• Certificate enrollment via Web Enrollment instead of RPC
• New request options: Renew, Key Archival, Key Size
• Added PyInstaller specification
• General restructure and change of parameters

• Fixed DNS resolutions

Fixed issues #32 and #33

• Added minimum version for cryptography dependency

• Fixed crash for when a CA has no templates

• Added MS-RRP (Remote Registry) for retrieving CA configuration in case MS-CSRA (Certificate Services Remote Administration) fails
• Added template and CRL options to forge
• Added timeout to LDAP connection

• Updated method for retrieving CA configuration (Now uses ICertAdminD2 (MS-CSRA) rather than remote registry (MS-RRP)

• Removed fixed hashing algorithm for ESC3
• Formatting