SharpHound
SharpHound copied to clipboard
feat: collect unresolved published cert templates
Description
Collect unresolved published cert templates for EnterpriseCAs and store them in a property list.
Depends on this Commonlib PR: https://github.com/BloodHoundAD/SharpHoundCommon/pull/121
Motivation and Context
We want to collect the names of unresolved published cert templates, as an attacker can create or rename a cert template to have one of these names and then it will be published automatically.
How Has This Been Tested?
Collected in my lab with one EnterpriseCA with no unresolved cert templates and another with.
Screenshots (if appropriate):
Types of changes
- [ ] Chore (a change that does not modify the application functionality)
- [ ] Bug fix (non-breaking change which fixes an issue)
- [x] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing functionality to change)
Checklist:
- [x] Documentation updates are needed, and have been made accordingly.
- [ ] I have added and/or updated tests to cover my changes.
- [x] All new and existing tests passed.
- [ ] My changes include a database migration.