paranoidninja / carboncopy Goto Github PK
View Code? Open in Web Editor NEWA tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux
License: Apache License 2.0
A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux
License: Apache License 2.0
After using your code exactly as instructed in the picture and trying to verify via signtool.exe I get the following error: "SignTool Error: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider."
Can I verify it somehow?
Hey there
Are there any plans to implement a feature to do the same for powershell scripts?
cheers
The files are created, It seems to be an error with the path variable in signtool.exe.
[+] Loading public key of www.ibm.com in Memory... [+] Cloning Certificate Version [+] Cloning Certificate Serial Number [+] Cloning Certificate Subject [+] Cloning Certificate Issuer [+] Cloning Certificate Registration & Expiration Dates [+] Signing Keys [+] Creating certs\www.ibm.com.crt and certs\www.ibm.com.key [+] Clone process completed. Creating PFX file for signing executable... [+] Platform is Windows OS... [+] Signing signedhttpproxy.exe with signtool.exe... [X] Something Went Wrong! [X] Exception: [WinError 2] The system cannot find the file specified
+-+-+-+-+-+-+-+-+-+-+-+-+
|C|a|r|b|o|n|S|i|g|n|e|r|
+-+-+-+-+-+-+-+-+-+-+-+-+
CarbonSigner v1.0
Author: Paranoid Ninja
[+] Loading public key of www.orange.com in Memory...
[+] Cloning Certificate Version
[+] Cloning Certificate Serial Number
[+] Cloning Certificate Subject
[+] Cloning Certificate Issuer
[+] Cloning Certificate Registration & Expiration Dates
[+] Signing Keys
[+] Creating certs/www.orange.com.crt and certs/www.orange.com.key
[+] Clone process completed. Creating PFX file for signing executable...
[+] Platform is Linux OS...
[+] Signing prometheus.exe with certs/www.orange.com.pfx using osslsigncode...
[+] Failed to create file: prometheus.exe
139900009712256:error:02001011:system library:fopen:File exists:../crypto/bio/bss_file.c:69:fopen('prometheus.exe','w+bx')
139900009712256:error:2006D002:BIO routines:BIO_new_file:system lib:../crypto/bio/bss_file.c:78:
Failed
[X] Something Went Wrong!
[X] Exception: Command '('osslsigncode', 'sign', '-pkcs12', PosixPath('certs/www.orange.com.pfx'), '-n', 'Notepad Benchmark Util', '-i', 'http://sha256timestamp.ws.symantec.com/sha256/timestamp', '-in', 'prometheus.exe', '-out', 'prometheus.exe')' returned non-zero exit status 255.
Update documentation to reflect install steps and dependencies
I git clone-ed the repo and tried immediately but I dunno why it hangs to the ssl.get_server_certificate...
I dont know why but using carboncopy eliminates defender but some for some reason it triggers mcafee av!
Just for notice!
usage.jpg doesnt help either someone tell me how to use this piece of shit
I did manage to sign my exe with cert from microsoft (mwahaha), but when I look into details, it shows that the certificate in the signature cannot be verified. Any clue on how to improve this?
Thanks!
Can anyone help?
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.