certutil

Windows Server 2003 Source Code | Ready To Compile

Exfiltrate data with DNS queries. Based on CertUtil and NSLookup.

This script can get all the Hashes (MD2, MD4, MD5, SHA1, SHA256, SHA384, SHA512) with Certutil.exe command.

此软件用于免费下载网易云付费下载的音乐

add a ca.crt certificate to $HOME/.pki/nssdb/cert9.db and $HOME/.pki/nssdb/key4.db in python

Certificate generation utility. DON'T PUSH PRS HERE!

Helper library to facilitate the generation of SSL certificates using the BouncyCastle.Cryptography library.

Common file transfert methods

A detection engineering repository simulating a real ransomware intrusion using Sysmon logs and Sigma rules. Includes coverage for mshta execution, netcat reverse shells, PowerShell enumeration, service modification, RunOnce registry persistence, data exfiltration, and encryption activity.

SIEM Investigations showcases SOC-style investigations focused on detecting, analyzing, and responding to real-world threats using SIEM techniques. It demonstrates hands-on log analysis, event correlation, alert triage, and incident response aligned with MITRE ATT&CK and practical Blue Team workflows.

Practical cheatsheet for X.509 certificate formats (PEM, DER, PKCS#7, PKCS#12, JKS) and conversions between them using OpenSSL, certutil, keytool, and Python - one command per copy-paste block.

How to make SSL working on localhost for free.

This package provides an easy way to parse all templates from ADCA service. It's packed with a binary for calling certutil -v -template which then puts everything in a JSON array object.

bash scripts to create ssl mTLS certificates using openssl and various ciphers

TryHackMe walkthrough focused on detecting Living Off the Land activity using trusted Windows tools, SIEM alerts, and command-line analysis.

Sharing the same NSS database with Firefox, Thunderbird and certutil

Common file transfert methods

Precompiled binaries of Mozilla NSS's certutil

dc2url uses windows api handles for HTTP requests to go along with other popular programs like curl, powershell, bitsadmin, certutil, python, wget, node, cscript, mshta to provide access to private hosting addresses and unlike the others. This is because the JavaScript enabled headless processes requests using the Microsoft Windows WebView2 handle.