adcs-persistence
Establishes persistence and exploits weak certificate mapping in AD CS. Covers ESC9 (no security extension), ESC10 (weak certificate mapping), ESC12-15 (YubiHSM, issuance policy, altSecIdentities, app
Also installable via skills CLI
npx skills add blacklanternsecurity/red-run/skills/ad/adcs-persistence