Powered by Blogger.

Follow cktricky

Blog Archive

  • ▼  2020 (3)
    • ▼  May (1)
      • WeirdAAL update - get EC2 snapshots
    • ►  April (1)
    • ►  March (1)
  • ►  2019 (24)
    • ►  December (1)
    • ►  May (2)
    • ►  March (3)
    • ►  February (7)
    • ►  January (11)
  • ►  2018 (2)
    • ►  November (1)
    • ►  February (1)
  • ►  2017 (16)
    • ►  November (1)
    • ►  August (2)
    • ►  June (5)
    • ►  May (1)
    • ►  March (1)
    • ►  January (6)
  • ►  2016 (13)
    • ►  December (1)
    • ►  November (1)
    • ►  August (2)
    • ►  June (1)
    • ►  May (2)
    • ►  March (2)
    • ►  February (1)
    • ►  January (3)
  • ►  2015 (31)
    • ►  December (2)
    • ►  November (2)
    • ►  September (3)
    • ►  August (1)
    • ►  June (1)
    • ►  May (3)
    • ►  April (2)
    • ►  March (6)
    • ►  February (6)
    • ►  January (5)
  • ►  2014 (10)
    • ►  December (1)
    • ►  October (2)
    • ►  June (1)
    • ►  May (2)
    • ►  March (2)
    • ►  February (1)
    • ►  January (1)
  • ►  2013 (21)
    • ►  December (3)
    • ►  October (2)
    • ►  September (3)
    • ►  August (1)
    • ►  July (2)
    • ►  May (2)
    • ►  April (3)
    • ►  March (3)
    • ►  January (2)
  • ►  2012 (53)
    • ►  December (3)
    • ►  November (5)
    • ►  October (11)
    • ►  September (6)
    • ►  August (2)
    • ►  June (2)
    • ►  May (12)
    • ►  April (6)
    • ►  March (1)
    • ►  February (3)
    • ►  January (2)
  • ►  2011 (50)
    • ►  December (5)
    • ►  November (8)
    • ►  October (3)
    • ►  September (3)
    • ►  August (1)
    • ►  July (3)
    • ►  June (5)
    • ►  May (8)
    • ►  April (3)
    • ►  March (4)
    • ►  February (3)
    • ►  January (4)
  • ►  2010 (54)
    • ►  December (2)
    • ►  November (4)
    • ►  October (1)
    • ►  September (3)
    • ►  August (1)
    • ►  July (6)
    • ►  June (4)
    • ►  May (9)
    • ►  April (7)
    • ►  March (5)
    • ►  February (4)
    • ►  January (8)
  • ►  2009 (125)
    • ►  December (7)
    • ►  November (10)
    • ►  October (12)
    • ►  September (20)
    • ►  August (3)
    • ►  July (1)
    • ►  June (2)
    • ►  May (9)
    • ►  April (12)
    • ►  March (9)
    • ►  February (23)
    • ►  January (17)
  • ►  2008 (169)
    • ►  December (5)
    • ►  November (14)
    • ►  October (19)
    • ►  September (4)
    • ►  August (16)
    • ►  July (15)
    • ►  June (19)
    • ►  May (19)
    • ►  April (10)
    • ►  March (23)
    • ►  February (16)
    • ►  January (9)
  • ►  2007 (73)
    • ►  December (14)
    • ►  November (6)
    • ►  October (7)
    • ►  September (9)
    • ►  August (7)
    • ►  July (14)
    • ►  June (5)
    • ►  May (11)

Follow carnal0wnage

Blogs

  • Lares Blog
  • Metasploit Blog
  • Room 362
  • Pentestify
  • SkullSecurity

Follow Attack Research

Links

  • Lares Consulting
  • Attack Research
  • Strategic Security
  • EthicalHacker.net
  • Metasploit
Carnal0wnage Blog
Showing posts with label digital signatures. Show all posts
Showing posts with label digital signatures. Show all posts

Monday, January 5, 2009

How to digitally sign...

all kinds of things for your client side attack

http://blog.didierstevens.com/2009/01/05/howto-add-a-digital-signature-to-an-office-document/

http://blog.didierstevens.com/2009/01/04/howto-add-a-digital-signature-to-a-pdf-file/

http://blog.didierstevens.com/2008/12/31/howto-add-a-digital-signature-to-executables/

http://blog.didierstevens.com/2009/01/01/howto-add-a-digital-signature-to-a-firefox-add-on/

and how to make your own cert

http://blog.didierstevens.com/2008/12/30/howto-make-your-own-cert-with-openssl/
CG
/
11:34 PM
/
No comments client side attacks, digital signatures
Older Posts Home
Subscribe to: Posts (Atom)

Blog Archive

  • ▼  2020 (3)
    • ▼  May (1)
      • WeirdAAL update - get EC2 snapshots
    • ►  April (1)
    • ►  March (1)
  • ►  2019 (24)
    • ►  December (1)
    • ►  May (2)
    • ►  March (3)
    • ►  February (7)
    • ►  January (11)
  • ►  2018 (2)
    • ►  November (1)
    • ►  February (1)
  • ►  2017 (16)
    • ►  November (1)
    • ►  August (2)
    • ►  June (5)
    • ►  May (1)
    • ►  March (1)
    • ►  January (6)
  • ►  2016 (13)
    • ►  December (1)
    • ►  November (1)
    • ►  August (2)
    • ►  June (1)
    • ►  May (2)
    • ►  March (2)
    • ►  February (1)
    • ►  January (3)
  • ►  2015 (31)
    • ►  December (2)
    • ►  November (2)
    • ►  September (3)
    • ►  August (1)
    • ►  June (1)
    • ►  May (3)
    • ►  April (2)
    • ►  March (6)
    • ►  February (6)
    • ►  January (5)
  • ►  2014 (10)
    • ►  December (1)
    • ►  October (2)
    • ►  June (1)
    • ►  May (2)
    • ►  March (2)
    • ►  February (1)
    • ►  January (1)
  • ►  2013 (21)
    • ►  December (3)
    • ►  October (2)
    • ►  September (3)
    • ►  August (1)
    • ►  July (2)
    • ►  May (2)
    • ►  April (3)
    • ►  March (3)
    • ►  January (2)
  • ►  2012 (53)
    • ►  December (3)
    • ►  November (5)
    • ►  October (11)
    • ►  September (6)
    • ►  August (2)
    • ►  June (2)
    • ►  May (12)
    • ►  April (6)
    • ►  March (1)
    • ►  February (3)
    • ►  January (2)
  • ►  2011 (50)
    • ►  December (5)
    • ►  November (8)
    • ►  October (3)
    • ►  September (3)
    • ►  August (1)
    • ►  July (3)
    • ►  June (5)
    • ►  May (8)
    • ►  April (3)
    • ►  March (4)
    • ►  February (3)
    • ►  January (4)
  • ►  2010 (54)
    • ►  December (2)
    • ►  November (4)
    • ►  October (1)
    • ►  September (3)
    • ►  August (1)
    • ►  July (6)
    • ►  June (4)
    • ►  May (9)
    • ►  April (7)
    • ►  March (5)
    • ►  February (4)
    • ►  January (8)
  • ►  2009 (125)
    • ►  December (7)
    • ►  November (10)
    • ►  October (12)
    • ►  September (20)
    • ►  August (3)
    • ►  July (1)
    • ►  June (2)
    • ►  May (9)
    • ►  April (12)
    • ►  March (9)
    • ►  February (23)
    • ►  January (17)
  • ►  2008 (169)
    • ►  December (5)
    • ►  November (14)
    • ►  October (19)
    • ►  September (4)
    • ►  August (16)
    • ►  July (15)
    • ►  June (19)
    • ►  May (19)
    • ►  April (10)
    • ►  March (23)
    • ►  February (16)
    • ►  January (9)
  • ►  2007 (73)
    • ►  December (14)
    • ►  November (6)
    • ►  October (7)
    • ►  September (9)
    • ►  August (7)
    • ►  July (14)
    • ►  June (5)
    • ►  May (11)

Links

  • carnal0wnage On Slideshare
  • carnal0wnage Vimeo Channel
  • carnal0wnage

Recent Posts

Popular Posts

Recent Posts



Popular Posts

  • Minecraft Mod, Mother's Day, and A Hacker Dad
    Over the weekend my wife was feeling under the weather. This meant we were stuck indoors and since she is sick and it's Mother's day...
  • Minecraft Mod, Follow up, and Java Reflection
    After yesterday's post , I received a ton of interesting and creative responses regarding how to get around the mod's restrictions w...
  • Jenkins - Identify IP Addresses of nodes
    While doing some research I found several posts on stackoverflow asking how to identify the IP address of nodes.  You might want to know thi...
  • The Duality of Attackers - Or Why Bad Guys are a Good Thing™
    The Duality of Attackers - Or Why Bad Guys are a Good Thing™ It’s no secret I've been on a spiritual journey the last few years. I ...
  • WeirdAAL update - get EC2 snapshots
    I watched a good DEF CON video on abusing public AWS Snapshots https://www.youtube.com/watch?v=-LGR63yCTts I, of course, wanted to check thi...
  • Jenkins - decrypting credentials.xml
    If you find yourself on a Jenkins box with script console access you can decrypt the saved passwords in credentials.xml in the following way...
  • What is your GCP infra worth?...about ~$700 [Bugbounty]
    BugBounty story #bugbountytips A fixed but they didn't pay the bugbounty story... Timeline: reported 21 Oct 2019 validated at Cr...
  • Devoops: Nomad with raw_exec enabled
    "Nomad is a flexible container orchestration tool that enables an organization to easily deploy and manage any containerized or legacy...
  • Jenkins - messing with exploits pt3 - CVE-2019-1003000
    References: https://www.exploit-db.com/exploits/46453 http://blog.orange.tw/2019/02/abusing-meta-programming-for-unauthenticated-rce.html...
  • Jenkins - CVE-2018-1000600 PoC
    second exploit from the blog post https://blog.orange.tw/2019/01/hacking-jenkins-part-1-play-with-dynamic-routing.html Chained with CV...

Contributors

  • CG
  • Javuto
  • cktricky

Copyright 2023 © Carnal0wnage Blog