Adcs on Domain Securityhttps://domainsecurity.agency/tags/adcs/Recent content in Adcs on Domain SecurityHugoenSat, 12 Sep 2026 00:00:00 +0000HTB: Certified ยท from WriteOwner to Domain Admin by chaining ACLs, Shadow Credentials and ESC9https://domainsecurity.agency/posts/htb-certified/Sat, 12 Sep 2026 00:00:00 +0000https://domainsecurity.agency/posts/htb-certified/An assumed-breach box with not a single software vulnerability in sight: the whole domain falls through five badly delegated permissions and one certificate template missing a security extension, chained together to turn an ordinary user into Domain Administrator.