https://github.com/vcsjones/authenticodelint
Lints an authenticode signed binary.
https://github.com/vcsjones/authenticodelint
authenticode authenticode-lint signature
Last synced: about 1 month ago
JSON representation
Lints an authenticode signed binary.
- Host: GitHub
- URL: https://github.com/vcsjones/authenticodelint
- Owner: vcsjones
- License: mit
- Created: 2016-04-11T03:52:45.000Z (about 9 years ago)
- Default Branch: main
- Last Pushed: 2025-03-15T21:17:47.000Z (2 months ago)
- Last Synced: 2025-03-31T10:01:34.590Z (about 1 month ago)
- Topics: authenticode, authenticode-lint, signature
- Language: C#
- Size: 195 KB
- Stars: 38
- Watchers: 6
- Forks: 18
- Open Issues: 8
-
Metadata Files:
- Readme: README.md
- License: LICENSE.md
Awesome Lists containing this project
README
# Authenticode Lint
Lints an Authenticode signed binary.
This tool aides in the checking of a binary to lint Authenticode signed executables.
Authenticode, or "digitally signing" a binary is the process of applying a digital signature to the file.
Authenticode Lint looks at various aspects of the signature that might be problematic for users or all
together incorrect usage.
The tool is run from the command line, and has fairly simple usage. The most simple usage is:
authlint.exe -in "C:\path to some\executable.exe"
Which will print results something like this:
>Rule #10000 "Primary SHA1" passed.
>
>Rule #10001 "SHA2 Signed" passed.
Rules can be suppressed with the `-suppress` option:
authlint.exe -in "C:\path to some\executable.exe" -suppress 10001,10000
More information and options are available using `-help`.
# Installation
This tool requires .NET Core 2.1 and can be installed as a .NET CLI global tool.
dotnet tool install -g AuthenticodeLint
# Documentation
Documentation for usage and for each rule is documented [on the wiki](https://github.com/vcsjones/AuthenticodeLint/wiki).
# Goals
The purpose of this tool is not to validate that everything uses the strongest signature algorithms
and certificates possible. Rather, this tool aims to make sure that the signatures provide proper
security while maintaining compatibility with as many environments as possible.