Exetools  

Go Back   Exetools > General > Source Code

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 11-24-2024, 16:58
wx69wx2023 wx69wx2023 is offline
Family
 
Join Date: Sep 2023
Posts: 316
Rept. Given: 48
Rept. Rcvd 59 Times in 34 Posts
Thanks Given: 586
Thanks Rcvd at 877 Times in 230 Posts
wx69wx2023 Reputation: 59
Quote:
Originally Posted by niculaita View Post
That is the big problem: fake time tamp server response site "http://tsa.pki.jemmylovejenny.tk/SHA1/2015-01-01T12:00:00"
does not works anymore ?
https://blog.talosintelligence.com/old-certificate-new-signature/
The timestamp server can be set up by self.
"http://tsa.pki.jemmylovejenny.tk"" is closed.
So try "/t http://time.pika.net.cn/fake/RSA/2013-11-24T00:00:00" (use cs1.pfx)

I test ,all is ok!

Note: first install the root cer of the fake timestamp server. (in the atratchment, just execute the install reg easily or install .cer to root by hand)

FYI:
https://github.com/Jemmy1228/HookSigntool
https://github.com/PIKACHUIM/FakeSign
Attached Files
File Type: zip CA-ALLCERT.zip (11.1 KB, 15 views)
Reply With Quote
The Following User Gave Reputation+1 to wx69wx2023 For This Useful Post:
niculaita (11-25-2024)
The Following User Says Thank You to wx69wx2023 For This Useful Post:
niculaita (11-24-2024)
  #2  
Old 11-24-2024, 19:39
niculaita's Avatar
niculaita niculaita is offline
Family
 
Join Date: Jun 2011
Location: here
Posts: 1,476
Rept. Given: 1,009
Rept. Rcvd 95 Times in 65 Posts
Thanks Given: 5,431
Thanks Rcvd at 508 Times in 359 Posts
niculaita Reputation: 95
I have made a cmd bat file next to signtool.exe and exetools.* files:
c:
cd\
cd C:\1\signtool
date 24.11.2013
time 00:00:00,81
signtool.exe sign -a -f cs1.pfx -p cs123456 -t http://time.pika.net.cn/fake/RSA/2013-11-24T00:00:00 exetools.sys
time 00:00:00,81
signtool.exe sign -a -f cs1.pfx -p cs123456 -t http://time.pika.net.cn/fake/RSA/2013-11-24T00:00:00 exetools.cat
pause

time 00:00:00,81 UTC+8 China
or date 11.24.2013 depends of your regional setting

Signed sys and without digital certificate have same hash/sha1 codes so that .cat file sees them ok ?
I know .inf should not be changed inside after creating cat file.
__________________
Decode and Conquer
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On


Similar Threads
Thread Thread Starter Forum Replies Last Post
VMProtect Source Code Potentially Leaked atom0s General Discussion 12 11-23-2022 04:21
Leaked Alder Lake BIOS Source Code DavidXanatos General Discussion 5 11-02-2022 19:35
Microsoft 37GB source code leaked? WhoCares General Discussion 14 05-30-2022 18:56


All times are GMT +8. The time now is 14:10.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )