Vulnerable ADCS Lab Setup

Step-by-step guide to building a deliberately vulnerable Active Directory Certificate Services environment for hands-on testing of ADCS attack chains. Covers lab setup from scratch so you can practice exploitation techniques in a controlled space before touching production infrastructure.

Read the original on pentestguy.com

Run it safely. Deliberately vulnerable setups belong inside an isolated attack range: a host-only network with no route out, and a snapshot to roll back to.