pyWhisker
Shadow Credentials: add a KeyCredentialLink to the victim.
A tool for the Shadow Credentials attack from Linux. It adds a KeyCredentialLink (a key you control) to a victim you have GenericWrite over, to then authenticate as them via PKINIT.
Family AD abuse (ACL, ADCS, coercion)
Flags --target --action add
Concepts Shadow Credentials, GenericWrite
Cheatsheet ACL / DACL abuse
Installation
pipx install pywhiskerUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.