| View previous topic :: View next topic |
| Author |
Message |
kill1212
Newbie cheater
![]() Reputation: 0
Joined: 30 May 2008
Posts: 12
|
 Posted: Fri Jan 02, 2009 4:37 pm Post subject: Vista and certificates |
 |
|
I wrote a simply driver to test it 
It's one line DbgPrint("Hello world"). I have signed this driver with makecert, signtool.
It works on XP32 normally, Vista32 too but on
Vista x64 it cannot load. My certificate on XP is ok but Vista shows
that's not trusted and driver will not be loaded. Why ? Can anyone help ?
Regards,
Kill1212
|
|
| Back to top |
|
 |
hcavolsdsadgadsg
I'm a spammer
![]() Reputation: 26
Joined: 11 Jun 2007
Posts: 5801
|
| Posted: Fri Jan 02, 2009 6:06 pm Post subject: |
|
|
hit F8 as the system is booting, and one of the options should allow it.
google will provide more information
|
|
| Back to top |
|
|
Dark Byte
Site Admin
 Reputation: 472
Joined: 09 May 2003
Posts: 25882
Location: The netherlands
|
| Posted: Fri Jan 02, 2009 8:03 pm Post subject: |
|
|
You need to get a new certificate. (A class 3 certificate one) Cost quite a bit of money though.
Ps. if you buy one, care to let me use it from time to time ?
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
|
kill1212
Newbie cheater
![]() Reputation: 0
Joined: 30 May 2008
Posts: 12
|
| Posted: Sat Jan 03, 2009 4:53 pm Post subject: |
|
|
f**** microsoft ....
They are blocking a lot of software:
1. I need to buy certificate for 1337$
2. I need to bypass patch guard
3. I need to rebuild my driver to 64bit support
sucks
Last edited by kill1212 on Tue Jan 06, 2009 5:22 pm; edited 1 time in total |
|
| Back to top |
|
|
rapion124
Grandmaster Cheater Supreme
![]() Reputation: 0
Joined: 25 Mar 2007
Posts: 1095
|
| Posted: Sat Jan 03, 2009 8:31 pm Post subject: |
|
|
The driver signing is $300/year I believe.
PatchGuard prevents kernel-mode hooking. If you can't hook, that means the anti-cheat can't hook either, so you're on even ground.
Your driver should already have 64-bit support already if you coded it right.
|
|
| Back to top |
|
|
kill1212
Newbie cheater
![]() Reputation: 0
Joined: 30 May 2008
Posts: 12
|
| Posted: Tue Jan 06, 2009 5:19 pm Post subject: |
|
|
yes... i must bypass patchguard or something like this [i got driver that does a bypass for PG1, PG2, PG3 !]
anyway... there is a good way to disable it by using console
Dark Byte... i found 100% working way of signing Write a small app that register your certificate in your system store as Trusted Root Certificate. User will only confirm the installation (look Crypto Api at MSDN "AddEncodedCertificateToSystemStore" or something like this and it should works or use Microsoft's "certmgr.exe" msdn_microsoft_com/en-us/library/ms172241.aspx (replace _ with .)
Last edited by kill1212 on Tue Jan 06, 2009 5:30 pm; edited 1 time in total |
|
| Back to top |
|
|
nwongfeiying
Grandmaster Cheater
![]() Reputation: 2
Joined: 25 Jun 2007
Posts: 695
|
| Posted: Tue Jan 06, 2009 5:27 pm Post subject: |
|
|
| Dark Byte wrote: | You need to get a new certificate. (A class 3 certificate one) Cost quite a bit of money though.
Ps. if you buy one, care to let me use it from time to time ? |
LOL @ the P.S.
I would imagine that the forum allow you ample amounts of revenue to buy all the driver signing you need, but I guess not. I was going to make a site like craigslist and hopefully profit from it and if I ever (hoping to dear God that I do) profit from the site, I'll be sure to sponsor you [with your driver signing needs and whatnot].
|
|
| Back to top |
|
|
Dark Byte
Site Admin
Reputation: 472
Joined: 09 May 2003
Posts: 25882
Location: The netherlands
|
| Posted: Tue Jan 06, 2009 5:30 pm Post subject: |
|
|
| Quote: |
Dark Byte... i found 100% working way of signing Razz Write a small app that register your certificate in your system store as Trusted Root Certificate. User will only confirm the installation (look Crypto Api at MSDN "AddEncodedCertificateToSystemStore" or something like this and it should works or use Microsoft's "certmgr.exe" msdn_microsoft_com/en-us/library/ms172241.aspx (replace _ with .)
|
have you tried it ? (I currently don't have any certificate at all so can't test)
For now when I decide to write a 64-bit version I'll just ask people to reboot and press f8 during boot and allow signed drivers, or to boot up with dbvm loaded (I can get usermode code to run in ring0 and from there allocate memory and parse the PE header of a driver and load it. Of course, exception handling is screwed then and I have no driverobject, but that's no big deal)
| Quote: |
LOL @ the P.S.
I would imagine that the forum allow you ample amounts of revenue to buy all the driver signing you need, but I guess not. I was going to make a site like craigslist and hopefully profit from it and if I ever (hoping to dear God that I do) profit from the site, I'll be sure to sponsor you [with your driver signing needs and whatnot].
|
and sure I could buy a signature, but then I'd be responsible for the use and abuse of the driver. And a driver that lets users modify memory or lets other people load their driver is against the rules set by MS. Making them revoke my certificate and block it.
Look up atsiv
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping
Last edited by Dark Byte on Tue Jan 06, 2009 5:47 pm; edited 2 times in total |
|
| Back to top |
|
|
nwongfeiying
Grandmaster Cheater
![]() Reputation: 2
Joined: 25 Jun 2007
Posts: 695
|
| Posted: Tue Jan 06, 2009 5:39 pm Post subject: |
|
|
| How ironic when you're trying to help other people and people tend to backstab you. I now know the downsides to open-source projects [for x64-bit operating systems].
|
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
