SharpHound icon indicating copy to clipboard operation
SharpHound copied to clipboard

feat: collect unresolved published cert templates

Open JonasBK opened this issue 1 year ago • 0 comments

Description

Collect unresolved published cert templates for EnterpriseCAs and store them in a property list.

Depends on this Commonlib PR: https://github.com/BloodHoundAD/SharpHoundCommon/pull/121

Motivation and Context

We want to collect the names of unresolved published cert templates, as an attacker can create or rename a cert template to have one of these names and then it will be published automatically.

How Has This Been Tested?

Collected in my lab with one EnterpriseCA with no unresolved cert templates and another with.

Screenshots (if appropriate):

image

Types of changes

  • [ ] Chore (a change that does not modify the application functionality)
  • [ ] Bug fix (non-breaking change which fixes an issue)
  • [x] New feature (non-breaking change which adds functionality)
  • [ ] Breaking change (fix or feature that would cause existing functionality to change)

Checklist:

  • [x] Documentation updates are needed, and have been made accordingly.
  • [ ] I have added and/or updated tests to cover my changes.
  • [x] All new and existing tests passed.
  • [ ] My changes include a database migration.

JonasBK avatar Apr 29 '24 09:04 JonasBK