Active Directory Certificate Services Lab

1. Add the ludus_adcs role to your Ludus server

ludus ansible roles add badsectorlabs.ludus_adcs

2. Modify your ludus config to add the role to a Windows server VM

ludus range config get > config.yml

config.yml

ludus:
  - vm_name: "{{ range_id }}-ad-dc-win2022-server-x64-1"
    hostname: "{{ range_id }}-DC01-2022"
    template: win2022-server-x64-template
    vlan: 10
    ip_last_octet: 11
    ram_gb: 6
    cpus: 4
    windows:
      sysprep: true
    domain:
      fqdn: ludus.domain
      role: primary-dc
    roles:
      - badsectorlabs.ludus_adcs

ludus range config set -f config.yml

3. Deploy the range

ludus range deploy

4. Enjoy your ESC1,2,3,4,6,8, and 13 attack paths!