A tool to execute Pass-The-Certificate attack for lateral movement between Azure AD joined machines.
- Python 2.7
- PythonForWindows
- Impacket
- Smbprotocol
Main.py [-h] --usercert USERCERT --certpass CERTPASS --remoteip REMOTEIP --command COMMAND
Main.py --usercert "AzureAD.pfx" --certpass AzureAD --remoteip 192.168.1.2 --command "whoami"
*Part of the Kerberos functionality and SMB warrper for PSEXEC taken from Impacket
This project is forked from AzureADJoinedMachinePTC project. The original author of the project is Mor Rubin.