OpenCourser brand icon
Sign in
We may earn an affiliate commission when you visit our partners.
Course Discontinued We've found some alternatives for you:

Top Active Alternatives

Privilege Escalation with Certify is no longer accepting new enrollments. We've matched the highest-rated active courses in this subject:

Read Reviews → Enroll Active
Read Reviews → Enroll Active
Read Reviews → Enroll Active
Pluralsight logo

Privilege Escalation with Certify

Kat DeLorean Seymour

Certify is a C# tool written by Will Schroeder and Lee Christiansen that can be used to find and compromise vulnerable configurations of Active Directory Certificate Services, allowing you to establish persistence and elevate your domain privileges.

Read more

Certify is a C# tool written by Will Schroeder and Lee Christiansen that can be used to find and compromise vulnerable configurations of Active Directory Certificate Services, allowing you to establish persistence and elevate your domain privileges.

During a Red Team engagement, after you have established a foothold and persistence on a system, you will want to elevate your privileges to further compromise the environment. Certify is a C# tool written by Will Schroeder and Lee Christiansen that can be utilized to find and compromise vulnerable configurations of Active Directory Certificate Services. In this course, Privilege Escalation with Certify, we will use Certify to elevate our domain privileges by a few different methods available with the tool including abusing misconfigured Certificate Templates, vulnerable certificate and PKI Access Control Lists and using NTLM Relay to add AD Certificate Services Endpoints. We will even see how we can use AD CS to extract valid NTLM hashes for users and establish long term persistence all without having to touch LSASS.

This course is no longer available. Find something similar by browsing:
Active Directory Certificate Services Certify Privilege Escalation Certificate Templates NTLM Relay NTLM Hashes Persistence

What's inside

Syllabus

Traffic lights

Read about what's good
what should give you pause
and possible dealbreakers
Teaches skills, knowledge, and/or tools that are highly relevant to industry
Develops professional skills or deep expertise in a particular topic or set of topics
Taught by Kat DeLorean Seymour, who are recognized for their work in x
Taught by Lee Christiansen, who are recognized for their work in x
Teaches skills, knowledge, and/or tools that are useful for personal growth and development

Save this course

Create your own learning path. Save this course to your list so you can find it easily later.
Save

Reviews summary

Mastering ad cs privilege escalation with certify

According to learners, 'Privilege Escalation with Certify' is a highly practical and in-depth course designed for cybersecurity professionals. Students praise its realistic, hands-on labs and the instructor's ability to break down complex Active Directory Certificate Services concepts. The course is seen as essential for mastering domain privilege escalation and provides actionable techniques directly applicable to red team engagements. While the content is current and relevant, a few reviewers noted that prior foundational Active Directory knowledge is beneficial to fully keep up with the pace and depth of the material. Some past challenges with lab environment setup were mentioned, though recent feedback primarily highlights its strengths.
Instructor excels at explaining complex AD CS concepts.
"The instructor breaks down complex AD CS concepts and Certify usage into digestible, actionable steps."
"The instructor clearly knows their stuff and explains the 'why' behind the attacks, not just the 'how.'"
"The instructor's expertise shines through every lesson. This course dives deep into AD CS abuse."
Deeply covers current and critical privilege escalation techniques.
"This course fills a critical gap in many privilege escalation learning paths. The examples are current and relevant."
"The depth of coverage on Active Directory Certificate Services vulnerabilities is impressive."
"It's concise and to the point, no fluff. This is essential for anyone looking to master domain privilege escalation."
Provides realistic labs directly applicable to red teaming.
"The labs are incredibly realistic and provide hands-on experience that immediately translates to red team engagements."
"The hands-on demos using Certify were particularly valuable. I highly recommend it for pentesters and red teamers."
"The course is very hands-on, which is exactly what I needed. Everything is explained clearly and the practical exercises solidify the concepts."
Earlier reviews mentioned inconsistent audio quality.
"Useful information, but I found the audio quality in some early modules to be inconsistent, which made it harder to focus."
"I hope future iterations address the production quality, as the technical content itself is strong and the labs are good."
"While the technical content is strong, the inconsistent audio in earlier parts was a minor distraction."
Some users faced difficulties setting up the lab environment.
"Content is good, but the lab environment setup was a bit challenging and led to some frustration."
"I spent a lot of time troubleshooting rather than learning the actual attack techniques. Perhaps more guidance or a pre-configured environment would improve the experience for others."
"Once I got past the setup, the Certify explanations were clear and the technical content itself is strong."
Best for those with existing Active Directory fundamentals.
"My only minor gripe is that sometimes the pace felt a bit fast if you're not already familiar with AD concepts."
"It assumes some foundational knowledge, but if I had it, this course would significantly elevate my game."
"This is a good course for intermediate to advanced learners. Beginners might struggle without prior Active Directory knowledge."

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in Privilege Escalation with Certify with these activities:
Implement a scenario to uncover and compromise misconfigured Certificate Templates
Practice elevating domain privileges using misconfigured Certificate Templates to solidify your understanding.
Browse courses on Certificate Templates
Show steps
  • Establish a testing environment with a vulnerable Certificate Template.
  • Use Certify to identify and exploit the misconfiguration.
  • Elevate your domain privileges.
Follow a tutorial on exploiting vulnerable certificate and PKI Access Control Lists
Reinforce your knowledge on identifying and exploiting these vulnerabilities through guided instruction.
Browse courses on Privilege Escalation
Show steps
  • Find a tutorial that covers exploiting vulnerable certificates and PKI ACLs.
  • Follow the steps outlined in the tutorial.
  • Test your understanding by attempting the exercises in the tutorial.
Practice using NTLM Relay to add AD Certificate Services Endpoints
Enhance your skills in exploiting NTLM Relay to gain control over AD Certificate Services Endpoints.
Show steps
  • Set up a lab environment with vulnerable machines.
  • Configure Certify to use NTLM Relay.
  • Execute the attack and add a new AD Certificate Services Endpoint.
Three other activities
Expand to see all activities and additional details
Show all six activities
Write a blog post總結the methods of privilege escalation with Certify
Solidify your understanding and share your knowledge by writing a comprehensive blog post on the techniques covered in the course.
Browse courses on Privilege Escalation
Show steps
  • Review your notes and identify the key concepts.
  • Research additional materials to supplement your knowledge.
  • Write a draft of your blog post.
  • Edit and proofread your post.
  • Publish your blog post and share it with others.
Attend an industry conference or meetup focused on cybersecurity
Networking and attending industry events can provide valuable insights to complement your learning.
Browse courses on Cybersecurity
Show steps
  • Identify industry conferences or meetups relevant to the course topic.
  • Register and attend the event.
  • Engage with speakers, attendees, and exhibitors.
Develop a proof-of-concept tool to automate privilege escalation using Certify
Challenge yourself by creating a tool that automates the techniques you learned, demonstrating your mastery of the subject.
Browse courses on Privilege Escalation
Show steps
  • Design the architecture of your tool.
  • Develop the code for your tool.
  • Test your tool in a lab environment.
  • Document your tool and make it available to others.

Career center

Learners who complete Privilege Escalation with Certify will develop knowledge and skills that may be useful to these careers:
Penetration Tester
Penetration Testers are responsible for identifying and exploiting security vulnerabilities in computer systems and networks. The techniques you learn in this course can be directly applied to a career as a Penetration Tester. This course will help you develop the skills you need to find and exploit vulnerabilities in Active Directory Certificate Services.
See salaries and explore the career path for Penetration Tester
Security Engineer
Security Engineers design, implement, and maintain security measures to protect an organization's computer systems and networks. The techniques you learn in this course can be directly applied to a career as a Security Engineer. This course will help you develop the skills you need to protect Active Directory Certificate Services from attack.
See salaries and explore the career path for Security Engineer
Malware Analyst
Malware Analysts are responsible for analyzing and identifying malware. This course may be useful for your career as a Malware Analyst as it teaches how to find and exploit vulnerabilities in Active Directory Certificate Services. This can help you better understand how to identify and mitigate security risks.
See salaries and explore the career path for Malware Analyst
Cloud Security Engineer
Cloud Security Engineers are responsible for securing cloud computing environments. This course may be useful for your career as a Cloud Security Engineer as it teaches how to find and exploit vulnerabilities in Active Directory Certificate Services. This can help you better protect cloud environments from similar attacks.
See salaries and explore the career path for Cloud Security Engineer
Security Architect
Security Architects design and implement security solutions for organizations. This course may be useful for your career as a Security Architect as it teaches how to find and exploit vulnerabilities in Active Directory Certificate Services. This can help you better understand how to protect organizations from similar attacks.
See salaries and explore the career path for Security Architect
IT Auditor
IT Auditors are responsible for assessing an organization's IT systems and controls. This course may be useful for your career as an IT Auditor as it teaches how to find and exploit vulnerabilities in Active Directory Certificate Services. This can help you better understand how to identify and mitigate security risks.
See salaries and explore the career path for IT Auditor
Incident Responder
Incident Responders are responsible for responding to and investigating security incidents. This course may be useful for your career as an Incident Responder as it teaches how to find and exploit vulnerabilities in Active Directory Certificate Services. This can help you better understand how to identify and mitigate security risks.
See salaries and explore the career path for Incident Responder
Information Security Analyst
An Information Security Analyst plans and implements security measures to protect an organization's computer systems and networks. As an Information Security Analyst, you can use the exploitation techniques you learn in this course to take on the role of a security tester. This course can help build a foundation for your offensive security career.
See salaries and explore the career path for Information Security Analyst
Systems Administrator
Systems Administrators are responsible for managing and maintaining computer systems and networks. This course may be useful for your career as a Systems Administrator as it teaches how to find and exploit vulnerabilities in Active Directory Certificate Services. This can help you better protect the systems you manage from similar attacks.
See salaries and explore the career path for Systems Administrator
Network Administrator
Network Administrators are responsible for managing and maintaining computer networks. This course may be useful for your career as a Network Administrator as it teaches how to find and exploit vulnerabilities in Active Directory Certificate Services. This can help you better protect the networks you manage from similar attacks.
See salaries and explore the career path for Network Administrator
Cybersecurity Analyst
Cybersecurity Analysts are responsible for identifying, analyzing, and responding to cybersecurity threats. This course may be useful for your career as a Cybersecurity Analyst as it teaches how to find and exploit vulnerabilities in Active Directory Certificate Services. This can help you better understand how to protect organizations from similar attacks.
See salaries and explore the career path for Cybersecurity Analyst
Chief Information Security Officer (CISO)
Chief Information Security Officers (CISOs) are responsible for overseeing an organization's information security program. This course may be useful for your career as a CISO as it teaches how to find and exploit vulnerabilities in Active Directory Certificate Services. This can help you better understand how to protect organizations from similar attacks.
See salaries and explore the career path for Chief Information Security Officer (CISO)
Information Security Manager
Information Security Managers are responsible for developing and implementing security policies and procedures. This course may be useful for your career as an Information Security Manager as it teaches how to find and exploit vulnerabilities in Active Directory Certificate Services. This can help you better understand how to protect organizations from similar attacks.
See salaries and explore the career path for Information Security Manager
Ethical Hacker
Ethical Hackers, also known as White Hat Hackers, are security professionals who use their skills to help organizations identify and fix security vulnerabilities. This course may be useful for your career as an Ethical Hacker as it teaches how to find and exploit vulnerabilities in Active Directory Certificate Services. This can help you better understand how to protect organizations from similar attacks.
See salaries and explore the career path for Ethical Hacker
Security Consultant
Security Consultants help organizations improve their security posture by identifying vulnerabilities and recommending solutions. This course may be useful for your career as a Security Consultant as it teaches how to find and exploit vulnerabilities in Active Directory Certificate Services. This can help you better understand how to protect organizations from similar attacks.
See salaries and explore the career path for Security Consultant

Reading list

We've selected eight books that we think will supplement your learning. Use these to develop background knowledge, enrich your coursework, and gain a deeper understanding of the topics covered in Privilege Escalation with Certify.
Cover image
Windows Internals, Part 2
Save
Provides a deep dive into the inner workings of Windows, including Active Directory and Certificate Services. It is invaluable for understanding the vulnerabilities that Certify exploits.
Windows Internals, Part 2 (Developer Reference)
Paperback
$$
Windows Internals, Part 2 (Developer Reference)
Kindle Edition
$$
Cover image
Penetration Testing
Save
Provides a practical guide to penetration testing, including chapters on privilege escalation and persistence. It would be a helpful resource for those interested in learning more about these topics.
Penetration Testing: A Hands-On Introduction to...
Paperback
$$
Penetration Testing: A Hands-On Introduction to...
Kindle Edition
$$
Cover image
Network Security Assessment
Save
Provides a comprehensive guide to network security assessment, including chapters on privilege escalation and persistence. It would be a helpful resource for those interested in learning more about these topics.
Network Security Assessment: Know Your Network
Paperback
$$
Cover image
CEH Certified Ethical Hacker Cert Guide
Save
Provides a comprehensive guide to the CEH certification, including chapters on privilege escalation and persistence. It would be a helpful resource for those interested in learning more about these topics.
Certified Ethical Hacker (CEH) Version 10 Cert...
Hardcover
$$
CEH Certified Ethical Hacker Cert Guide...
Hardcover
$$$
CEH Certified Ethical Hacker Cert Guide...
Kindle Edition
$$
Cover image
NIST SP 800-100 Information Security Handbook
Save
Provides a comprehensive guide to computer security incident handling, including chapters on privilege escalation and persistence. It would be a helpful resource for those interested in learning more about these topics.
NIST SP 800-100 Information Security Handbook: A...
Paperback
$$
Cover image
Applied Cryptography
Save
Provides a comprehensive overview of cryptography, including topics such as public key cryptography and digital certificates. It valuable resource for understanding the cryptographic concepts that underpin Certify.
Applied Cryptography: Protocols, Algorithms and...
Hardcover
$$$
Applied Cryptography: Protocols, Algorithms, and...
Hardcover
$$$$
Applied Cryptography: Protocols, Algorithms, and...
Paperback
$$
Applied Cryptography: Protocols, Algorithms, and...
Paperback
$$$$
Applied Cryptography: Protocols, Algorithms and...
Kindle Edition
$$
Cover image
Metasploit, 2nd Edition
Save
Provides a comprehensive guide to using Metasploit for penetration testing. It includes information on modules that can be used with Certify.
Metasploit, 2nd Edition
Kindle Edition
$$
Cover image
Security Engineering and Tobias on Locks Two-Book...
Save
Provides a comprehensive guide to security engineering. It includes information on topics such as privilege escalation and access control.
Security Engineering and Tobias on Locks Two-Book...
Hardcover
$$$$

Share

Help others find this course page by sharing it with your friends and followers:
Facebook
LinkedIn
Reddit
X
Link
Email

Similar courses

Here are nine courses similar to Privilege Escalation with Certify.
Advanced Cybersecurity Topics
Most relevant
Pentesting Fundamentals for Beginners
Most relevant
Execution, persistence, privilege escalation and evasion
Most relevant
CCNA Security 2019 210-260 Video Boot Camp With Chris...
Most relevant
Learn Active Directory Pentesting for RedTeaming - Part 1
Most relevant
Advanced Windows Active Directory Penetration Testing
Most relevant
Linux Privilege Escalation Examples From Zero to Hero -...
Most relevant
Active Directory Pentesting Full Course - Red Team Hacking
Most relevant
Windows Local Privilege Escalation Mastery - Red Team

Pluralsight Buyer Protection & Guarantee

Verified partner policies & purchase protections

Enterprise Technology Platform
Free Trial & Audit

10-Day Free Trial

10-day free trial (up to 200 minutes of content) with access to the Skills video library and skill assessments. Cancel before day 10 to avoid automatic conversion.

Return & Refund Policy

Cancel Anytime (Non-Refundable Once Billed)

Cancel easily online anytime before the 10-day trial expires to prevent billing. Once subscription fees are paid, individual subscriptions are non-refundable (cancellation stops future renewals).

Buyer Protections

Verified Academic & Industry Partner

Skill IQ and Role IQ diagnostic benchmark assessments, hands-on lab environments, and curated learning paths designed by technology leaders.

Key Purchase Protections
10-day free trial on individual Skills plans
Skill IQ assessments to benchmark proficiency
Cancel anytime online before trial ends without fees
Hands-on interactive labs and enterprise-grade tech content
OpenCourser Verified Partner Policy details last reviewed: 2026-10-22
Course image
Time
18 hours
Level
Intermediate
Via
Pluralsight
Instructor
Kat DeLorean Seymour
Language
English
Traffic lights
Read about what's good
what should give you pause
and possible dealbreakers
Teaches skills, knowledge, and/or tools that are highly relevant to industry
Develops professional skills or deep expertise in a particular topic or set of topics
Taught by Kat DeLorean Seymour, who are recognized for their work in x
Taught by Lee Christiansen, who are recognized for their work in x
Teaches skills, knowledge, and/or tools that are useful for personal growth and development
Share this
Share to help others discover this course.
Facebook LinkedIn X Reddit Link Email
Begin learning today
This course is currently discontinued or unavailable. See active alternatives above.
Course Unavailable
Save for later
Add this course to your list. Find it anytime.
Save
Our mission

OpenCourser helps millions of learners each year. People visit us to learn workspace skills, ace their exams, and nurture their curiosity.

Our extensive catalog contains over 50,000 courses and twice as many books. Browse by search, by topic, or even by career interests. We'll match you to the right resources quickly.

Find this site helpful? Tell a friend about us.

Affiliate disclosure

We're supported by our community of learners. When you purchase or subscribe to courses and programs or purchase books, we may earn a commission from our partners.

Your purchases help us maintain our catalog and keep our servers humming without ads.

Thank you for supporting OpenCourser.

© 2016 - 2025 OpenCourser