← All tool guides

Certipy (AD Certificate Abuse)

Auto-generated by Q-Branch Armory audit on 2026-10-12.

Overview

Active Directory Certificate Services enumeration and abuse tool.

Classification

**Category:** Active Directory Tools

**Armory status:** Installed (certipy)

**Q-Branch check:** Ready — binary found in PATH

**Present on VPS3:** yes

**Installed flag:** yes

**Primary binary:** `certipy`

**Binary in PATH:** yes

**Resolved path:** `/usr/local/bin/tengu-armory-certipy-ad-certificate-abuse`

Prerequisites

docker

go

java

root

ruby

wifi

Install

pip install --user certipy-ad

Run

certipy --help

Operator notes

Launch from the [Digital Armory](/pentest/armory/) — do not maintain parallel tool lists in Q-Branch.

If the Q-Branch check is not **Ready**, run install steps or update the HackingTool manifest before relying on this tool in an engagement.

For authorized TenguProtect red-team work only.

Reference

https://github.com/ly4k/Certipy