Certify icon indicating copy to clipboard operation
Certify copied to clipboard

`certify request` not working with ptt/pth

Open NickYan7 opened this issue 2 years ago • 4 comments

Awesome project! Hope following issue can be fixed:

Similar with https://github.com/GhostPack/Certify/issues/13 , it seems that the user context cannot be changed which always be current user (no relevant parameters supplied), lead that we can't request certificate by obtained ntlm hash or tgt.

Tested on a domain-joined machine, I've tried pth by mimikatz & createnetonly by rubeus , neither did they working.

However runas /netonly /user:domain\user cmd can do certify request successfully (assuming I've obtained the plain text passwd of victim).

Please check this, thanks a lot.

NickYan7 avatar Jan 31 '23 10:01 NickYan7