Locksmith2
2026.3.26.1044
An AD CS toolkit for AD Admins, Defensive Security Professionals, and Filthy Red Teamers
Minimum PowerShell version
5.1
There is a newer prerelease version of this module available.
See the version list below for details.
See the version list below for details.
The owner has unlisted this package.
This could mean that the module is deprecated or shouldn't be used anymore.
Installation Options
Owners
Copyright
(c) 2025 - 2026. All rights reserved.
Package Details
Author(s)
- Jake Hildreth
Tags
Locksmith Locksmith2 ActiveDirectory ADCS CA Certificate CertificateAuthority CertificateServices PKI X509 Windows
PSEditions
Dependencies
-
- PSCertutil (>= 0.0.3)
FileList
- Locksmith2.nuspec
- .github\FUNDING.yml
- .github\instructions\PowersHell.instructions.md
- .github\instructions\copilot-instructions.md
- .github\workflows\publish.yml
- .local\share\powershell\Modules\Locksmith2\Locksmith2.Classes.ps1
- .local\share\powershell\Modules\Locksmith2\Locksmith2.psd1
- .local\share\powershell\Modules\Locksmith2\Locksmith2.psm1
- Artefacts\Unpacked\Locksmith2\Locksmith2.Classes.ps1
- Artefacts\Unpacked\Locksmith2\Locksmith2.psd1
- Artefacts\Unpacked\Locksmith2\Locksmith2.psm1
- Build\Build-Module.ps1
- Classes\LS2AdcsObject.ps1
- Classes\LS2Issue.ps1
- Classes\LS2Principal.ps1
- Images\Locksmith2.png
- LICENSE
- Locksmith2.psd1
- Locksmith2.psm1
- Notes\Keys.ps1
- Notes\LogoOptions.ps1
- Notes\MoreLogos.ps1
- Notes\Select-Themes.ps1
- Notes\TASKS.md
- Notes\TODO.md
- Private\Convert\Convert-IdentityReferenceToNTAccount.ps1
- Private\Convert\Convert-IdentityReferenceToSid.ps1
- Private\Convert\Expand-GroupMembership.ps1
- Private\Convert\Resolve-Principal.ps1
- Private\Data\AceDefinitions.psd1
- Private\Data\ESCDefinitions.psd1
- Private\Data\PrincipalDefinitions.psd1
- Private\Get\Get-AdcsObject.ps1
- Private\Get\Get-FlattenedIssues.ps1
- Private\Get\Get-ModuleThatLoadedThisFunction.ps1
- Private\Get\Get-RootDSE.ps1
- Private\Initialize\Initialize-AdcsObjectStore.ps1
- Private\Initialize\Initialize-DirectoryConnections.ps1
- Private\Initialize\Initialize-DomainStore.ps1
- Private\Initialize\Initialize-LS2Scan.ps1
- Private\Initialize\Initialize-PrincipalDefinitions.ps1
- Private\New\New-AuthenticatedDirectoryEntry.ps1
- Private\New\New-GCSearcher.ps1
- Private\New\New-LDAPSearcher.ps1
- Private\Set\Set-AnyPurposeEKUExist.ps1
- Private\Set\Set-AuthenticationEKUExist.ps1
- Private\Set\Set-AuthorizedSignatureNotRequired.ps1
- Private\Set\Set-AuthorizedSignatureRequired.ps1
- Private\Set\Set-CAAdministrator.ps1
- Private\Set\Set-CAAuditFilter.ps1
- Private\Set\Set-CACertificateManager.ps1
- Private\Set\Set-CAComputerPrincipal.ps1
- Private\Set\Set-CADisableExtensionList.ps1
- Private\Set\Set-CAEditFlags.ps1
- Private\Set\Set-CAInterfaceFlags.ps1
- Private\Set\Set-DangerousCAAdministrator.ps1
- Private\Set\Set-DangerousCACertificateManager.ps1
- Private\Set\Set-DangerousEditor.ps1
- Private\Set\Set-DangerousEnrollee.ps1
- Private\Set\Set-EnrollmentAgentEKUExist.ps1
- Private\Set\Set-HasNonStandardOwner.ps1
- Private\Set\Set-LowPrivilegeCAAdministrator.ps1
- Private\Set\Set-LowPrivilegeCACertificateManager.ps1
- Private\Set\Set-LowPrivilegeEditor.ps1
- Private\Set\Set-LowPrivilegeEnrollee.ps1
- Private\Set\Set-ManagerApprovalNotRequired.ps1
- Private\Set\Set-ManagerApprovalRequired.ps1
- Private\Set\Set-NoSecurityExtension.ps1
- Private\Set\Set-Owner.ps1
- Private\Set\Set-RequiresEnrollmentAgentSignature.ps1
- Private\Set\Set-SANAllowed.ps1
- Private\Set\Set-TemplateEnabled.ps1
- Private\Test\Test-IsBA.ps1
- Private\Test\Test-IsDA.ps1
- Private\Test\Test-IsDangerousAce.ps1
- Private\Test\Test-IsDangerousPrincipal.ps1
- Private\Test\Test-IsDomainComputer.ps1
- Private\Test\Test-IsDomainUser.ps1
- Private\Test\Test-IsEA.ps1
- Private\Test\Test-IsEnrollmentAce.ps1
- Private\Test\Test-IsLatestVersion.ps1
- Private\Test\Test-IsLocalAdmin.ps1
- Private\Test\Test-IsLowPrivilegePrincipal.ps1
- Private\Test\Test-IsModuleAvailable.ps1
- Private\Test\Test-IsModuleLoaded.ps1
- Private\Test\Test-IsPowerShellCore.ps1
- Private\Test\Test-IsStandardOwner.ps1
- Private\Test\Test-IsSupportedOS.ps1
- Private\Test\Test-IsSupportedPS.ps1
- Private\Test\Test-IsUtf8.ps1
- Private\Test\Test-IsWindows.ps1
- Private\Test\Test-IsWindowsTerminal.ps1
- Private\Test\Test-IssueExists.ps1
- Private\Test\Test-PowerShellEnvironment.ps1
- Private\UI\Read-Choice.ps1
- Private\UI\Show-IssueReport.ps1
- Private\UI\Show-Logo.ps1
- Private\Utility\Add-ToIssueStore.ps1
- Private\Utility\Expand-IssueByGroup.ps1
- Private\Utility\Expand-IssueTemplate.ps1
- Private\Utility\Get-AdcsObjectName.ps1
- Private\Utility\Get-ForestNameFromDN.ps1
- Private\Utility\Get-IssueCount.ps1
- Private\Utility\Install-NeededModule.ps1
- Private\Utility\Repair-PowerShellEnvironment.ps1
- Private\Utility\Update-DollarSignProfile.ps1
- Private\Utility\Update-OutputEncoding.ps1
- Public\Find-LS2RiskyPrincipal.ps1
- Public\Find-LS2VulnerableCA.ps1
- Public\Find-LS2VulnerableObject.ps1
- Public\Find-LS2VulnerableTemplate.ps1
- Public\Get-LS2Stores.ps1
- Public\Invoke-Locksmith2.ps1
- Public\New-LS2Dashboard.ps1
- Public\Set-LS2Credential.ps1
- Public\Set-LS2Forest.ps1
- QuickTest.ps1
- README.MD
- Unused\Convert-SidToDirectoryEntry.ps1
- Unused\Show-Logo.ps1
- Unused\Write-StyledHost.ps1
Version History
| Version | Downloads | Last updated |
|---|---|---|
| 2026.5.15200... | 0 | 5/15/2026 |
| 2026.5.141155 | 5 | 5/14/2026 |
| 2026.5.14114... | 2 | 5/14/2026 |
| 2026.5.140905 | 3 | 5/14/2026 |
| 2026.5.131754 | 3 | 5/13/2026 |
| 2026.5.121748 | 5 | 5/12/2026 |
| 2026.5.121703 | 3 | 5/12/2026 |
| 2026.5.101536 | 15 | 5/10/2026 |
| 2026.5.101131 | 7 | 5/10/2026 |
| 2026.5.100653 | 4 | 5/10/2026 |