full-disclosure - trust? - win2k source code tools

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <2098E9F95A6DFA4D8FE8B6BE30B62E0811C75C@nt_server.infosec.ru>
From: gordey at infosec.ru (Sergey V. Gordeychik)
Subject: trust? - win2k source code tools

And so? Can I kick you? :-)

You can find Signcode.exe and other tools in Microsoft Platform SDK.

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cptools
/html/cpgrfFileSigningToolSigncodeexe.asp

Certificates you can find in your "Trusted Roots". 
IN EVERY INSTALLATION OF WINDOWS.
Where private keys, Billy?

-----Original Message-----
From: Sander [mailto:zion@....de] 

kick me if i'm wrong.. but that wouldn't be "cool"! :-)

cheers,
sander.

Am Montag, 16. Februar 2004 22:55 schrieb morning_wood:
> NOW EVERY EXECUTABLE IS TRUSTED AND DIGITALY SIGNED