[PWN-WP]

Thank you for sharing this with us

[bysonz]

What is "Code Signing" ?

my man thanks so much for this

[monalisa]

the question kinda makes me want to answer, but I have a feeling you do this in the hidden section,..

---

jesus christ, I fell for a low-effort post.
okay kids, listen up and listen well, because I will explain to you why this post is irrelevant bullshit:

yes, you can create an "impersonating" certificate yourself, with low effort. the code repos OP linked are basically just scripts that call openssl on your OS. nothing complex there, you can do this on your shell.
the problem is that self-signed certificates (you create and sign the cert yourself) are untrusted by default. when you run code and the signature of this code is checked, the process will of course check the validity of the certificate itself first. typically, this is done by checking with a certificate authority, which calls the chain of trust and so on.
you can clearly see in the screenshot by OP, that the "certificate in the signature cannot be verified." it even has a big red X in the picture. who is fooled by this???

signing your code with a self-generated cert is not the issue, the issue is getting your cert signed by a valid CA. and these CAs typically check if you actually control the website your're trying to create a cert for. truly, only the brightest minds are on breachforums.

[sysc2]

replying because it tells me to

[DINTI]

What is "Code Signing" ?

Very interesting! Thanks for sharing.

[Darklearner1234]

thankyou for posting this i have been trying to find out about code signing

[yukinaa]

Thanks i need to udnerstand it

[Foiaut37]

lets see what you talking about brooo

[gomod]

I hope this is worth it!

[NX000]

amazing, great, thanka pro