# AzureADJoinedMachinePTC

A tool to execute Pass-The-Certificate attack for lateral movement between Azure AD joined machines.

## Requirements

* Python 2.7
* PythonForWindows
* Impacket
* Smbprotocol

## Usage

```
Main.py [-h] --usercert USERCERT --certpass CERTPASS --remoteip REMOTEIP --command COMMAND
```

## Example

```
Main.py --usercert "AzureAD.pfx" --certpass AzureAD --remoteip 192.168.1.2 --command "whoami"
```



*Part of the Kerberos functionality and SMB warrper for PSEXEC taken from Impacket


## Credit

This project is forked from [AzureADJoinedMachinePTC](https://github.com/morRubin/AzureADJoinedMachinePTC) project. 
The original author of the project is [Mor Rubin](https://twitter.com/rubin_mor).