jborean93

PowerShell Code Signing

This is to try and document the behaviour around PowerShell code signing.

Setup

The following code can be used to set up this scenario. This must be run as an administrator in Windows PowerShell.

Note: PowerShell uses implicit remoting for the New-SelfSignedCertificate which breaks the constains serialization. You must run this on Windows PowerShell.

jborean93

# Copyright: (c) 2020, Jordan Borean (@jborean93) <jborean93@gmail.com>
# MIT License (see LICENSE or https://opensource.org/licenses/MIT)

Add-Type -TypeDefinition @'
using System;
using System.IO;
using System.IO.Pipes;
using System.Management.Automation;
using System.Management.Automation.Runspaces;
using System.Threading;

jborean93

# Copyright: (c) 2020, Jordan Borean (@jborean93) <jborean93@gmail.com>
# MIT License (see LICENSE or https://opensource.org/licenses/MIT)

Function Find-InArray {
    <#
    .SYNOPSIS
    Finds the index of a byte[] in a byte[].
    #>
    [CmdletBinding()]
    param (

jborean93

import smbclient

from smbprotocol.file_info import (
    InfoType,
)

from smbprotocol.open import (
    DirectoryAccessMask,
    FilePipePrinterAccessMask,
    SMB2QueryInfoRequest,

jborean93

#!/usr/bin/env bash

set -o pipefail -eu

function create_package {
    name="${1}"
    version="${2}"
    requirements="${3:-}"

    if [ ! -z "${requirements}" ]; then

jborean93

# Copyright: (c) 2020, Jordan Borean (@jborean93) <jborean93@gmail.com>
# MIT License (see LICENSE or https://opensource.org/licenses/MIT)

#Requires -Module MSAL.PS

Function New-EXOPSSession {
    <#
    .SYNOPSIS
    Will open a PSSession to Exchange Online.

jborean93

# Copyright: (c) 2020, Jordan Borean (@jborean93) <jborean93@gmail.com>
# MIT License (see LICENSE or https://opensource.org/licenses/MIT)

Function ConvertFrom-IndirectString {
    <#
    .SYNOPSIS
    Converts a indirect string identifier to the actual string value it represents.

    .PARAMETER IndirectString
    The indirect string that begins with '@' to convert to the proper string value.

jborean93

# Copyright: (c) 2020, Jordan Borean (@jborean93) <jborean93@gmail.com>
# MIT License (see LICENSE or https://opensource.org/licenses/MIT)

Function Get-FtpFile {
    [CmdletBinding()]
    param (
        [Parameter(Mandatory=$true)]
        [System.Uri]
        [Alias('Uri')]
        $FtpUrl,

jborean93

# Copyright: (c) 2020, Jordan Borean (@jborean93) <jborean93@gmail.com>
# MIT License (see LICENSE or https://opensource.org/licenses/MIT)

Function Write-WUAError {
    <#
    .SYNOPSIS
    Convert raw HRESULT codes to a human readable error.
    
    .PARAMETER Exception
    The COMException that the error code is from.

jborean93

#!/usr/bin/env python3

import asyncio
import json
import os
import subprocess
import sys
import tempfile
import yaml