# Installer certsync avec Homebrew, MacPorts, Nix

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de certsync pour les workflows d'agents IA.

## installation

```sh
sudo av install brew:certsync
```

Commandes d'installation supplémentaires:

### macOS

- Homebrew (100%):

```sh
brew install certsync
```

  Preuve: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install certsync
```

  Preuve: MacPorts ports tree: security/certsync/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- Nix (92%):

```sh
nix profile install nixpkgs#certsync
```

  Preuve: nixpkgs package indexes: pkgs/by-name/ce/certsync/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

## Faits du paquet

- **Clé du paquet:** brew:certsync
- **Gestionnaire de paquets:** Homebrew
- **Version:** 0.1.6
- **Résumé source:** Dump NTDS with golden certificates and UnPAC the hash
- **Page d'accueil:** <https://github.com/zblurx/certsync>
- **Dernière mise à jour:** 2026-07-15T10:35:11Z
- **Généré:** 2026-08-03T19:37:03+00:00

## exécutables

- certsync (alias)

## Comportement d'installation

- Bouteille: non disponible

## Version et fraîcheur

- page générée: 2026-08-03
- version du gestionnaire: 0.1.6
## Historique du projet et usages

certsync is an Active Directory Certificate Services attack tool for remotely dumping NTDS data without DRSUAPI. Its README describes a workflow based on golden certificates and UnPAC the hash.

### Historique du projet

The upstream GitHub repository was created in January 2023, with the first commit on the same day. A 0.1.6 GitHub release followed in March 2024, and the project is published as a Python package as well as source.

### Historique d'adoption

The README documents local installation, PyPI installation, and BlackArch packaging, and links a Repology packaging-status badge. The supplied package facts also list Homebrew, MacPorts, and Nix packages.

### Modes d'utilisation

certsync collects users, CA information, and CRLs over LDAP, dumps the CA certificate and private key or uses a supplied CA PFX, forges certificates, and uses PKINIT plus UnPAC to recover hashes. Its options cover password, NTLM hash, Kerberos cache, AES key, DNS, LDAP filtering, and OPSEC timing controls.

### Pourquoi les passionnés de paquets s'y intéressent

certsync is package-nerd interesting because it represents the fast path from a newly described ADCS tradecraft technique to broad packaging in security distributions and general package managers. It is niche, but package presence makes lab and assessment reproduction much easier.

### Chronologie

- 2023: Public GitHub repository and first commit created.
- 2024: 0.1.6 release published.

### Related projects

- The README credits Certipy, the UnPAC the hash technique, Certified Pre-Owned, Certify, and GOAD as related research or lab projects.

### Sources

- <https://api.github.com/repos/zblurx/certsync>
- <https://github.com/zblurx/certsync>
- <https://github.com/zblurx/certsync#readme>
- <https://formulae.brew.sh/api/formula/certsync.json>


## Notes de sécurité

Aucun manifest local de gestion des secrets correspondant n'a été trouvé pour certsync. Les métadonnées de paquet Nucleus restent publiées ici afin que la couverture future dispose d'une URL stable.


## Autres enregistrements de gestionnaires de paquets

- Nix - certsync: normalized package name match | nixpkgs package indexes: pkgs/by-name/ce/certsync/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- MacPorts - certsync: normalized package name match | MacPorts ports tree: security/certsync/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/certsync.yml](https://github.com/mxcl/pkgdb/blob/main/combined/certsync.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph
