MagicSigner
Patcher dll for signtool that allows signing with expired certificates
Usage
Just place XmlLite.dll next to signtool.exe
Demo
Before MagicSigner
After MagicSigner
Alternative solutions
You can also just set the clock on your computer back. However that needs admin privileges, and has the tendency to break other apps, because it invalidates all the certificates TLS connections (like HTTPS) uses for the time.
How to defend against this
Simply apply the Microsoft vulnerable driver blocklist which contains all the known leaked certificates.
License
BSD Zero Clause License
Copyright (c) 2023 namazso <[email protected]>
Permission to use, copy, modify, and/or distribute this software for any
purpose with or without fee is hereby granted.
THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
PERFORMANCE OF THIS SOFTWARE.
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent