certipy-ad

MCP tool from Zebbern Kali MCP by zebbern

AD Certificate Services (ADCS) exploitation

How to use it

certipy-ad is exposed by the Zebbern Kali MCP MCP server. Add the server to your MCP client (Claude Desktop, Cursor, Windsurf and others), and the certipy-ad tool becomes available to the model automatically. See the full listing for setup details and every tool this server provides.

Install Zebbern Kali MCP

$docker run -d -p 5000:5000 --name zebbern-kali zebbern-kali-mcp

FULL ZEBBERN KALI MCP LISTING

Other tools in Zebbern Kali MCP (39)

Attack surface mapping

Subdomain discovery via various sources

AD privilege escalation framework

Coerce Windows authentication

Command injection exploitation

XSS scanning and exploitation

SpoolService abuse for relay attacks

Web content scanner

WinRM shell with upload/download

Fast web fuzzer

DNS reconnaissance

Advanced SQL injection detection

Group Managed Service Account password dumper

Directory/file/DNS brute-forcing

GPU-accelerated hash cracking

HTTP probing and technology detection

Network login brute-forcer

John the Ripper password cracker

Web crawler (v1.1.0 pre-built binary)

Kerberos relay and delegation abuse

LDAP domain information dumper

CIDR range manipulation

High-speed port scanner

High-performance DNS resolver

metasploit-framework

Full Metasploit Framework

Primary SMB/LDAP/WinRM tool (replaces crackmapexec)

Web server vulnerability scanner

Port scanning, service/version detection, NSE scripts

Template-based vulnerability scanner

NTLM relay coercion via EFS RPC

Shadow Credentials attack tool

LLMNR/NBT-NS/MDNS poisoner

Automated SQL injection

SSL/TLS configuration analysis

Passive subdomain discovery

Subdomain takeover checking

Fetch URLs from the Wayback Machine

WinRM command execution

WordPress vulnerability scanner