# certsync を Homebrew, MacPorts, Nix でインストール

certsync のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

## インストール

```sh
sudo av install brew:certsync
```

追加のインストールコマンド:

### macOS

- Homebrew (100%):

```sh
brew install certsync
```

  証拠: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install certsync
```

  証拠: MacPorts ports tree: security/certsync/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- Nix (92%):

```sh
nix profile install nixpkgs#certsync
```

  証拠: nixpkgs package indexes: pkgs/by-name/ce/certsync/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

## パッケージ情報

- **パッケージキー:** brew:certsync
- **パッケージマネージャ:** Homebrew
- **バージョン:** 0.1.6
- **ソース概要:** Dump NTDS with golden certificates and UnPAC the hash
- **ホームページ:** <https://github.com/zblurx/certsync>
- **最終更新:** 2026-07-15T10:35:11Z
- **生成日時:** 2026-08-03T19:37:03+00:00

## 実行可能ファイル

- certsync (エイリアス)

## インストール挙動

- Bottle: 利用不可

## バージョンと鮮度

- ページ生成日: 2026-08-03
- マネージャ版: 0.1.6
## プロジェクトの歴史と使われ方

certsync is an Active Directory Certificate Services attack tool for remotely dumping NTDS data without DRSUAPI. Its README describes a workflow based on golden certificates and UnPAC the hash.

### プロジェクトの歴史

The upstream GitHub repository was created in January 2023, with the first commit on the same day. A 0.1.6 GitHub release followed in March 2024, and the project is published as a Python package as well as source.

### 採用の歴史

The README documents local installation, PyPI installation, and BlackArch packaging, and links a Repology packaging-status badge. The supplied package facts also list Homebrew, MacPorts, and Nix packages.

### 使われ方

certsync collects users, CA information, and CRLs over LDAP, dumps the CA certificate and private key or uses a supplied CA PFX, forges certificates, and uses PKINIT plus UnPAC to recover hashes. Its options cover password, NTLM hash, Kerberos cache, AES key, DNS, LDAP filtering, and OPSEC timing controls.

### パッケージ好きにとっての重要性

certsync is package-nerd interesting because it represents the fast path from a newly described ADCS tradecraft technique to broad packaging in security distributions and general package managers. It is niche, but package presence makes lab and assessment reproduction much easier.

### タイムライン

- 2023: Public GitHub repository and first commit created.
- 2024: 0.1.6 release published.

### Related projects

- The README credits Certipy, the UnPAC the hash technique, Certified Pre-Owned, Certify, and GOAD as related research or lab projects.

### ソース

- <https://api.github.com/repos/zblurx/certsync>
- <https://github.com/zblurx/certsync>
- <https://github.com/zblurx/certsync#readme>
- <https://formulae.brew.sh/api/formula/certsync.json>


## セキュリティノート

certsync に一致するローカルシークレット処理マニフェストは見つかりませんでした。将来の対応で安定したパッケージ URL を使えるよう、Nucleus パッケージメタデータはここに公開されています。


## 他のパッケージマネージャ記録

- Nix - certsync: normalized package name match | nixpkgs package indexes: pkgs/by-name/ce/certsync/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- MacPorts - certsync: normalized package name match | MacPorts ports tree: security/certsync/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/certsync.yml](https://github.com/mxcl/pkgdb/blob/main/combined/certsync.yml)


## ソース

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph