Certificate Attacks
Certificate attacks involve misuse, theft, spoofing, or validation failures around digital certificates and trust chains.
Mechanism
Risk can arise from compromised private keys, fraudulent certificates, weak validation, expired certificates, or trust-store abuse.
Indicators to watch
Unexpected certificate issuers, hostname mismatches, new certificates for sensitive domains, expired chains, and changes in certificate transparency records.
Concept diagram
Defensive controls
Protect private keys, use managed certificate lifecycles, validate chains and hostnames, monitor certificate transparency, and remove obsolete trust anchors.
Recommended security control
Certificate Transparency monitoring
Never install untrusted roots on production endpoints for testing.
Defence practice lab
The administrator has not attached a tool link yet. This slot will show “Build Soon” until an external link is configured.
Defence techniques
Defence techniques for this attack will be added by the administrator.
All attack descriptions are for defensive education. Test scanning, traffic generation, interception, wireless testing, and vulnerable applications only on systems and networks you own or are explicitly authorized to assess.