ryuki's blog

ryuki's blog

root

/

tags

/

Steal or Forge Authentication Certificates (T1649)

Steal or Forge Authentication Certificates (T1649)

Jan 01, 19701 min read

Adversaries may steal or forge certificates used for authentication to access remote systems or resources.

Tactics
TA0006


See: MITRE ATT&CK

2 items with this tag.

  • Oct 04, 2025

    Certificate

    • hackthebox
    • hard
    • windows
    • zip
    • sliver
    • adcs
    • esc3
    • golden-certificate
    • semanagevolume
    • antivirus
    • T1078
    • T1078.002
    • T1110
    • T1110.002
    • T1190
    • T1552
    • T1552.001
    • T1649
  • Jun 14, 2025

    Infiltrator

    • hackthebox
    • ctf
    • windows
    • insane
    • adcs
    • esc1
    • esc4
    • certipy-ad
    • asreproast
    • bitlocker
    • pcap
    • wireshark
    • output-messenger
    • T1003
    • T1003.003
    • T1078
    • T1078.002
    • T1098
    • T1098.007
    • T1204
    • T1204.002
    • T1552
    • T1552.001
    • T1649

Created with ❤️ and Quartz

  • Mastodon
  • Bluesky
  • GitHub