Penetration Testing mailing list archives
Re: Certificate store
From: "Gleb Paharenko" <gpaharenko () gmail com>
Date: Fri, 4 Apr 2008 09:12:17 +0200
Hi. I'm not sure if I'm right, and have no time to check. But certificates under windows should be stored in something similar to Protected Store (part of Crypto Api). You can get access there using techniques similar to pwdump uses (dll injection). Perhaps it is exists viewer of all Protected Store entries. 2008/4/3, Pierre Cassimans <cazzeml () gmail com>:
Hi, Some questions about the microsoft certificate store: - is there a way to extract (or export) certificates from a microsoft certificate store when the certificates are marked as "not exportable - is there a way to extract the certificates from within a linux environment? Thx, Cazze ------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------
-- Best regards. Gleb Pakharenko. http://gpaharenko.livejournal.com ------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------
Current thread:
- Certificate store Pierre Cassimans (Apr 03)
- Re: Certificate store Gleb Paharenko (Apr 06)
- Re: Certificate store ilaiy (Apr 06)
- Re: Certificate store David Howe (Apr 08)