Penetration Testing: Re: Certificate store

["Gleb Paharenko" <gpaharenko () gmail com>]

Hi.

I'm not sure if I'm right, and have no time to check. But certificates
under windows should be stored in something similar to Protected Store
(part of Crypto Api). You can get access there using techniques
similar to pwdump uses (dll injection). Perhaps it is exists viewer of
all Protected Store entries.

2008/4/3, Pierre Cassimans <cazzeml () gmail com>:
> Hi,
>
>  Some questions about the microsoft certificate store:
>
>  - is there a way to extract (or export) certificates from a microsoft
>  certificate store when the certificates are marked as &quot;not
>  exportable
>  - is there a way to extract the certificates from within a linux environment?
>
>  Thx,
>  Cazze
>
>  ------------------------------------------------------------------------
>  This list is sponsored by: Cenzic
>
>  Need to secure your web apps NOW?
>  Cenzic finds more, "real" vulnerabilities fast.
>  Click to try it, buy it or download a solution FREE today!
>
>  http://www.cenzic.com/downloads
>  ------------------------------------------------------------------------

-- 
Best regards.
Gleb Pakharenko.
http://gpaharenko.livejournal.com

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------