Penetration Testing mailing list archives

Re: Certificate store


From: "Gleb Paharenko" <gpaharenko () gmail com>
Date: Fri, 4 Apr 2008 09:12:17 +0200

Hi.

I'm not sure if I'm right, and have no time to check. But certificates
under windows should be stored in something similar to Protected Store
(part of Crypto Api). You can get access there using techniques
similar to pwdump uses (dll injection). Perhaps it is exists viewer of
all Protected Store entries.

2008/4/3, Pierre Cassimans <cazzeml () gmail com>:
Hi,

 Some questions about the microsoft certificate store:

 - is there a way to extract (or export) certificates from a microsoft
 certificate store when the certificates are marked as &quot;not
 exportable
 - is there a way to extract the certificates from within a linux environment?

 Thx,
 Cazze

 ------------------------------------------------------------------------
 This list is sponsored by: Cenzic

 Need to secure your web apps NOW?
 Cenzic finds more, "real" vulnerabilities fast.
 Click to try it, buy it or download a solution FREE today!

 http://www.cenzic.com/downloads
 ------------------------------------------------------------------------




-- 
Best regards.
Gleb Pakharenko.
http://gpaharenko.livejournal.com

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------


Current thread: