When EPA isn't EPA'ing: What Tools Like Certify, Certipy and checkMSSQLStatus.py miss

Recently on engagements I started experiencing two reoccurring patterns, the first being that certipy and certify would both show me that a endpoint is not vulnerable to the ESC8 attack even though it is. The same was in telling me that the endpoint is vulnerable during my retests even though I knew it was not! Secondly that clients even after following Microsoft&rsquo;s advice in turning EPA on,…