Certipy 4.2.0

What's Changed

• Allow weak TLS ciphers in LDAP connection by @AdrianVollmer in #110
• Adds ESC11, missing IF_ENFORCEENCRYPTICERTREQUEST flag by @sploutchy in #105
• Added minimum RSA key length to template attributes by @raosridhar in #107
• Fix template command doesn't update template when appending values to existing attributes by @CykuTW in #103

New Contributors

• @sploutchy made their first contribution in #105
• @raosridhar made their first contribution in #107
• @CykuTW made their first contribution in #103

Full Changelog: 4.1.0...4.2.0

Certipy 4.1.0

What's Changed

• Fix the vulnerable template "Flags" attribute in order to work with Schannel (PassTheCert) by @antuache in #69
• certipy auth: Output LM hash by @rtpt-erikgeiser in #71
• Adding CAs to template properties. by @shikatano in #87
• Fixed authentication bug caused by Windows update

New Contributors

• @antuache made their first contribution in #69
• @rtpt-erikgeiser made their first contribution in #71
• @shikatano made their first contribution in #87

Full Changelog: 4.0.0...4.1.0

Certipy 4.0.0

What's Changed

• Schannel authentication for LDAPS
• SSPI / Integrated Windows authentication
• New BloodHound format for forked version
• Improved text and JSON output for find with vulnerable templates and CAs, and ability to hide administrators and non-vulnerable templates
• Both UPN and DNS SAN are supported for certificates instead of old -alt
• Certificate enrollment via Web Enrollment instead of RPC
• New request options: Renew, Key Archival, Key Size
• Added PyInstaller specification
• General restructure and change of parameters

Certipy 2.0.9

• Fixed DNS resolutions

Certipy 2.0.8

Fixed issues #32 and #33

Certipy 2.0.7

• Added minimum version for cryptography dependency

Certipy 2.0.6

• Fixed crash for when a CA has no templates

Certipy 2.0.5

• Added MS-RRP (Remote Registry) for retrieving CA configuration in case MS-CSRA (Certificate Services Remote Administration) fails
• Added template and CRL options to forge
• Added timeout to LDAP connection

Certipy 2.0.4

• Updated method for retrieving CA configuration (Now uses ICertAdminD2 (MS-CSRA) rather than remote registry (MS-RRP)

Certipy 2.0.3

• Removed fixed hashing algorithm for ESC3
• Formatting