Exploiting the Windows CryptoAPI Certificate Vulnerability

The NSA announced they had found a vulnerability in the certificate validation functionality on Windows 10 and Windows Server 2016/2019.