CLI tool dump the signing certificate from a portable executable.
CertDump is a command-line tool designed to extract signing certificates from Portable Executable (PE) files. It provides developers and security professionals with a straightforward way to analyze and retrieve certificates embedded in binaries.
Key Features:
Extracts certificates in PEM or DER formats for easy integration into workflows.
Supports installation via winget for seamless setup on Windows systems.
Cross-platform compatibility, running on Windows, Linux, and macOS.
Lightweight design with no external dependencies, ensuring quick execution.
Simple command-line interface with options to specify input files and output paths.
Audience & Benefit:
Ideal for developers, security researchers, and IT professionals who need to analyze or validate certificates in executable files. CertDump streamlines the process of extracting certificates, reducing manual effort and improving workflow efficiency. Its cross-platform support ensures consistent functionality across different operating systems, while its minimalistic design minimizes complexity and learning curves.
README
CertDump
Cross-Platform tool to dump the signing certificate from a Portable Executable (PE) file.
Get CertDump
There are different ways to obtain CertDump. Please check, which works for your operating system.
Winget
The easiest ways to install CertDump is with winget.
winget install secana.CertDump
Github release
You find the latest Windows binaries under the Release page.
Dotnet Global Tool
You can install the latest version as a dotnet global tool. The tool runs on Windows, Linux and MacOs.
The tool is automatically added to your path. Just run certdump from your shell. Example:
# Run CertDump
> certdump -help
CertDump 1.1.1
Copyright (C) 2019 CertDump
-f, --file Required. Input file to dump the certificate from.
-o, --out (Default: cert.dump) Output file to dump the certificate to.
--help Display this help screen.
--version Display version information.
Release new version
A new version is automatically released from the master branch when a git tag is discovered.
Tag a release commit with: git tag -a v1.0.0 -m "CertDump v1.0.0".
Push the tag to the origin: git push origin v1.0.0
Replace the version number with the one to use.
Winget
It's not possible to automate the winget release at the moment. To release a new version, a new manifest file needs to be published manually to winget-pkgs certdump.
