Skip to content

Instantly share code, notes, and snippets.

@leonjza
Created October 29, 2021 05:29
Show Gist options
  • Save leonjza/66d28ec123b95c942de52536cbd0b324 to your computer and use it in GitHub Desktop.
Save leonjza/66d28ec123b95c942de52536cbd0b324 to your computer and use it in GitHub Desktop.
Cobalt Strike Clone Executable Signature for code-signer Malleable Profile block
# clone the certificate for SysInternals TCPView.exe and save
# it as cert.pfx
$o = Get-PfxCertificate -FilePath .\tcpview.exe
$cl = New-SelfSignedCertificate -CloneCert $o
$p = ConvertTo-SecureString -String "password" -Force -AsPlainText
Export-PfxCertificate -FilePath cert.pfx -Cert $cl -Password $p
#!/bin/sh
keytool -importkeystore -srckeystore cert.pfx -srcstoretype pkcs12 -destkeystore cert.jks -deststoretype JKS
keytool -v -list -keystore cert.jks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment