Code Signing CLI tool supporting Authenticode, NuGet, VSIX, and ClickOnce

SignTool Library and Azure Key Vault Support

A cross-platform library for verifying Authenticode signatures

A TimeStamp Responder written in C#, which supports both Authenticode and RFC3161

JS library editing Windows Resource data

Lints an authenticode signed binary.

Simple, secure Authenticode and GPG code signing server

Library for ELF / Mach-O / Fat-Mach-O / PE / Compound / MSI / DMG formats parsing and checking signatures

Volatility plugin to validate Authenticode-signed processes, either with embedded signature or catalog-signed

Create and use code signing certificates with PowerShell

ASN.1 parser used by PeNet do parse Authenticode signatures

Authenticode for PNG files

Rust libraries and utilities for parsing Windows Certificate Trust Lists

Docker image for signing Windows binaries with Microsoft Authenticode using osslsigncode

AI-Driven Malware Triage & Deep Swarm Inspection Platform

Check Authenticode signature on Windows with Go

A playground to test PE file structures (Portable Executable)

An extension around SignTool to call into Azure Key Vault for the signing

🦀 TruchaSign 🦀 is an advanced tool for security research and authorized testing that clones Authenticode signature blocks from signed PE (Portable Executable) files and injects them into target binaries. It rewrites the `IMAGE_DIRECTORY_ENTRY_SECURITY` directory and recalculates the `CheckSum` in the Optional Header.