Windows-SignedBinary

Generieren eines signierten Windows-Binaries mit einem anderen Hash Die Idee war, Endpoint-Lösungen zu umgehen, die bekannte „bösartige“ signierte Anwendungen wie „regsvr32.exe“ blockieren. Ich wollte einen Weg finden, eine gültige signierte Datei mit einem anderen Hash zu erhalten. Die Analyse M...

MagicSigner

MagicSigner DLL patch per signtool che consente di firmare con certificati scaduti Utilizzo È sufficiente posizionare XmlLite.dll accanto a signtool.exe Demo Prima di MagicSigner Dopo MagicSigner Soluzioni alternative Puoi anche semplicemente riportare indietro l'orologio del computer. Tuttavia,...

Exploit for Improper Certificate Validation in Microsoft

CVE-2020-0601 PoC for CVE-2020-0601 – Windows CryptoAPI Cry...

The vulnerability of the signtool, a tool for working with digital signatures, arises from buffer overflows during the processing of command-line parameters. This allows attackers to trigger a service failure.

The vulnerability of the signtool tool for handling digital signatures arises from buffer overflows during the processing of command-line parameters. Exploiting this vulnerability can allow an attacker to cause a service failure in the application by entering a specially crafted sequence of data ...

TinyPDF Installer DLL Hijacking / Unsafe Temp Directory

Hi @ll, the executable installer "InstallTinyPDF.exe", available from , is surprise.- vulnerable: 1. DLL hijacking this is well-known and well-documented; see , , , and "InstallTinyPDF.exe" loads and executes UXTheme.dll and/or DWMAPI.dll from its "application directory" instead Windows' "system...