Exetools  

Go Back   Exetools > General > Source Code

Notices

Reply
 
Thread Tools Display Modes
  #31  
Old 10-30-2024, 23:37
wx69wx2023 wx69wx2023 is offline
Family
 
Join Date: Sep 2023
Posts: 156
Rept. Given: 10
Rept. Rcvd 39 Times in 19 Posts
Thanks Given: 163
Thanks Rcvd at 471 Times in 107 Posts
wx69wx2023 Reputation: 39
Quote:
Originally Posted by niculaita View Post
please upload only nvdia .pfx and password
magnet link has 18 GB too big form me
are you try?I have download and find the file, the path is dev\gpu_drv\stage_rel\apps\Ansel\signtool

if you do not download the big rar, i attached the pfx file and signtool.

I have test it success.


first change system time to 2015/7/28- 2018/7/27
then sign.bat your.sys.

my log below:
D:\NVIDIA\dev\gpu_drv\stage_rel\apps\Ansel\signtool>sign atapi.sys
Sign File atapi.sys

D:\NVIDIA\dev\gpu_drv\stage_rel\apps\Ansel\signtool>signtool.exe sign -a -f current_cert.pfx -p nv1d1aRules -t http://timestamp.verisign.com/scripts/timstamp.dll atapi.sys
Done Adding Additional Store
SignTool Error: ISignedCode::Timestamp returned error: 0x80072EE7
An unknown error has occured. Please contact your vendor for assistance.
SignTool Warning: Signing succeeded, but an error occurred while attempting to
timestamp: atapi.sys

Number of files successfully Signed: 1
Number of warnings: 1


the result:
https://prnt.sc/YjiicE_MR2H1
Attached Files
File Type: zip signtool.zip (209.4 KB, 15 views)
Reply With Quote
The Following User Says Thank You to wx69wx2023 For This Useful Post:
niculaita (11-01-2024)
  #32  
Old 10-31-2024, 05:54
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 1,174
Rept. Given: 334
Rept. Rcvd 233 Times in 123 Posts
Thanks Given: 277
Thanks Rcvd at 568 Times in 316 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
what happens if you omit using the -t parameter?
Reply With Quote
  #33  
Old 10-31-2024, 07:48
niculaita's Avatar
niculaita niculaita is offline
Family
 
Join Date: Jun 2011
Location: here
Posts: 1,405
Rept. Given: 969
Rept. Rcvd 89 Times in 61 Posts
Thanks Given: 4,682
Thanks Rcvd at 484 Times in 343 Posts
niculaita Reputation: 89
C:\signtoolm>signtool.exe sign -a -f current_cert.pfx -p nv1d1aRules -t http://timestamp.verisign.com/scripts/timstamp.dll Exetools.sys
Done Adding Additional Store
SignTool Error: ISignedCode::Sign returned error: 0x80880253
The signer's certificate is not valid for signing.
SignTool Error: An error occurred while attempting to sign: Exetools.sys

Number of errors: 1
C:\signtoolm>signtool.exe sign -a -f NVidia-OPM.pfx -p Green-87! -t http://timestamp.verisign.com/scripts/timstamp.dll E
xetools.sys
SignTool Error: No certificates were found that met all the given criteria.

Number of errors: 1
__________________
Decode and Conquer
Reply With Quote
  #34  
Old 10-31-2024, 08:39
niculaita's Avatar
niculaita niculaita is offline
Family
 
Join Date: Jun 2011
Location: here
Posts: 1,405
Rept. Given: 969
Rept. Rcvd 89 Times in 61 Posts
Thanks Given: 4,682
Thanks Rcvd at 484 Times in 343 Posts
niculaita Reputation: 89
I used signtool signwizard but if testsigning is off and PC restarted, the key does not apear in localhost:1947.
__________________
Decode and Conquer
Reply With Quote
  #35  
Old 10-31-2024, 08:52
wx69wx2023 wx69wx2023 is offline
Family
 
Join Date: Sep 2023
Posts: 156
Rept. Given: 10
Rept. Rcvd 39 Times in 19 Posts
Thanks Given: 163
Thanks Rcvd at 471 Times in 107 Posts
wx69wx2023 Reputation: 39
I am in win 10 x64, test is ok.
Please note:first change system time to 2015/7/28- 2018/7/27
then sign.bat your.sys.

Thank sendersu, omit -t parameter, may result in no timestamp error, it will use system time for timestamp, but if expired, file is considered untrustworthy.
if a timestamp server such as VeriSign and Digicert is used, as long as the signing time is within the validity period of the certificate, even if the certificate expires, the file will be considered valid because the file is signed within the validity period.

Last edited by wx69wx2023; 10-31-2024 at 09:13.
Reply With Quote
The Following User Says Thank You to wx69wx2023 For This Useful Post:
niculaita (10-31-2024)
  #36  
Old 11-01-2024, 04:12
niculaita's Avatar
niculaita niculaita is offline
Family
 
Join Date: Jun 2011
Location: here
Posts: 1,405
Rept. Given: 969
Rept. Rcvd 89 Times in 61 Posts
Thanks Given: 4,682
Thanks Rcvd at 484 Times in 343 Posts
niculaita Reputation: 89
Yes, thank you again
first set date between 2015 7 28- 2018 7 27 be it 10/10/2015

unlock bat and exe

make 1 folder in c:
extract archive to c:\1\signtool\

search cmd and run it as administrator
c:
Enter
cd\
Enter
cd 1
Enter
cd signtool
Enter
sign.bat Exetools.sys
Enter

now sys is signed without time stamp but ok

if you use good http://timestamp.sectigo.com then in message General tab of Signature:
A required certificate is not within its validity period when
verifying against the curent system clock or the timestamp in
the signed file.

I put XmlLite.dll near signtool.exe but no magic yet for me

run Batchinfgenv3.cmd from __batchinfgeneratorv2

use exetool.inf and exetool.cat (2 lines inside) from __batchinfgeneratorv2\exetools_out\emul_64

later use exetool.inf and exetool.cat (2 lines inside) from __batchinfgeneratorv2\exetools_out\emul_32

copy signed sys and above ini and almost empty cat files into folder __inf2cat\Driverforcat

if sys is 64 bit edit ini and instead of DriverVer=08/05/2024,1.0.0.0001 put DriverVer=10/10/2015,1.0.0.0001
if sys is 32 bit edit ini and instead of DriverVer=08/05/2024,1.0.0.0000 put DriverVer=10/10/2015,1.0.0.0000

if sys is 64 bit copy files from __inf2cat\X86\X64 into/over __inf2cat\X86\
if sys is 32 bit copy files from __inf2cat\X86\Xx86 into/over __inf2cat\X86\

run _makei2cw8.cmd from __inf2cat\

copy exetool.cat file into c:\1\signtool

sign.bat exetools.cat

Instal succesfuly but without testsigning On mode, no key in localhost:1947
Windows nu poate încărca driverul de dispozitiv pentru acest hardware. Este posibil ca driverul să fie deteriorat sau să lipsească. (Cod 39)

Windows cannot verify the digital signature for this file. The signing certificate for this file has been revoke

So, please help me more!
Windows cannot verify the digital signature for this file. The signing certificate for this file has been revoked.
__________________
Decode and Conquer
Reply With Quote
  #37  
Old 11-01-2024, 05:11
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 1,174
Rept. Given: 334
Rept. Rcvd 233 Times in 123 Posts
Thanks Given: 277
Thanks Rcvd at 568 Times in 316 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
>>The signing certificate for this file has been revoked.
Reply With Quote
  #38  
Old 11-01-2024, 05:35
niculaita's Avatar
niculaita niculaita is offline
Family
 
Join Date: Jun 2011
Location: here
Posts: 1,405
Rept. Given: 969
Rept. Rcvd 89 Times in 61 Posts
Thanks Given: 4,682
Thanks Rcvd at 484 Times in 343 Posts
niculaita Reputation: 89
Please digitaly sign both sys and cat files within this archive
https://mega.nz/file/fXo02agT#zfRYGVN2Afvuapkq3dP1RmxSwBUmQFTVbyobJLvkOyw
!
__________________
Decode and Conquer
Reply With Quote
  #39  
Old 11-01-2024, 14:20
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 1,174
Rept. Given: 334
Rept. Rcvd 233 Times in 123 Posts
Thanks Given: 277
Thanks Rcvd at 568 Times in 316 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
I told you above there are 24 different .pfx certs in that huge 18 GB archive,
have you tried them all?
Reply With Quote
  #40  
Old 11-01-2024, 15:57
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 1,174
Rept. Given: 334
Rept. Rcvd 233 Times in 123 Posts
Thanks Given: 277
Thanks Rcvd at 568 Times in 316 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
Your .sys driver is already signed - https://prnt.sc/cWRnwIaVncv5
what does it do? "

[Strings]
SPSVCINST_ASSOCSERVICE= 0x00000002
MSFT = "exetools"
StdMfg = "(Standard system devices)"
DiskId1 = "exetools exetools Installation Disk #1"
exetools.DeviceDesc = "exetools exetools"
exetools.SVCDESC = "exetools exetools"
Reply With Quote
  #41  
Old 11-01-2024, 22:53
niculaita's Avatar
niculaita niculaita is offline
Family
 
Join Date: Jun 2011
Location: here
Posts: 1,405
Rept. Given: 969
Rept. Rcvd 89 Times in 61 Posts
Thanks Given: 4,682
Thanks Rcvd at 484 Times in 343 Posts
niculaita Reputation: 89
It helps me to emulate sentinel hl/hasp SRM old keys
https://melodos.com/eshop/
__________________
Decode and Conquer

Last edited by niculaita; 11-23-2024 at 15:37.
Reply With Quote
  #42  
Old 11-01-2024, 23:36
niculaita's Avatar
niculaita niculaita is offline
Family
 
Join Date: Jun 2011
Location: here
Posts: 1,405
Rept. Given: 969
Rept. Rcvd 89 Times in 61 Posts
Thanks Given: 4,682
Thanks Rcvd at 484 Times in 343 Posts
niculaita Reputation: 89
1 make cert files

2 copy .sys in __mycertificatev3\DriverForSign and run __mycertificatev3\_signfilessys2_1st.cmd as signwizard
put http://timestamp.sectigo.com
results signed .sys

3 edit date in .inf LL/DD/YYYY

4 copy .sys and .ini in C:\__inf2cat\DriverForCat

5 run C:\__inf2cat\_makei2cw8.cmd
copy .cat, .inf and signed .sys in __mycertificatev3\DriverForSign and run __mycertificatev3\_signfilessys2_2nd.cmd as signwizard
put http://timestamp.sectigo.com
results signed .cat
__________________
Decode and Conquer
Reply With Quote
  #43  
Old 11-04-2024, 17:44
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 1,174
Rept. Given: 334
Rept. Rcvd 233 Times in 123 Posts
Thanks Given: 277
Thanks Rcvd at 568 Times in 316 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
I've gathered all certs + nearby files over here https://workupload.com/file/YZLvJAj46uS
Reply With Quote
The Following User Gave Reputation+1 to sendersu For This Useful Post:
niculaita (11-05-2024)
The Following User Says Thank You to sendersu For This Useful Post:
niculaita (11-05-2024)
  #44  
Old 11-05-2024, 02:33
niculaita's Avatar
niculaita niculaita is offline
Family
 
Join Date: Jun 2011
Location: here
Posts: 1,405
Rept. Given: 969
Rept. Rcvd 89 Times in 61 Posts
Thanks Given: 4,682
Thanks Rcvd at 484 Times in 343 Posts
niculaita Reputation: 89
in melodos code I found: this.m_FacadeProcessor = "http://timestamp.digicert.com;http://timestamp.globalsign.com/scripts/timstamp.dll;http://timestamp.comodoca.com/authenticode;http://tsa.starfieldtech.com";
AND: this.m_TaskProcessor = "http://timestamp.digicert.com;http://timestamp.globalsign.com/?signature=sha2;http://sha256timestamp.ws.symantec.com/sha256/timestamp;http://timestamp.comodoca.com?td=sha256";
__________________
Decode and Conquer
Reply With Quote
  #45  
Old 11-05-2024, 02:35
niculaita's Avatar
niculaita niculaita is offline
Family
 
Join Date: Jun 2011
Location: here
Posts: 1,405
Rept. Given: 969
Rept. Rcvd 89 Times in 61 Posts
Thanks Given: 4,682
Thanks Rcvd at 484 Times in 343 Posts
niculaita Reputation: 89
good sign certificates

Quote:
Originally Posted by sendersu View Post
I've gathered all certs + nearby files over here https://workupload.com/file/YZLvJAj46uS
How to find passwords of .pfx files ?

A tool please....!
__________________
Decode and Conquer
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On



All times are GMT +8. The time now is 21:23.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )