Projects & Tools

Community-maintained database of code-signing certificates abused by malware authors. Supports lookup by SHA256 hash, API access, YARA-based detection resources, and community submissions. The flagship project of Rogue Authority.

Interactive PKI & code-signing learning tool. Upload a signed Windows binary or paste a certificate — the tool extracts the full chain, decodes every field in plain English, and flags anomalies automatically.

Malware analysis tool that strips unnecessary padding and bloat from inflated binary samples — making oversized, intentionally padded malware practical to analyze and share.

Facilitates abuse report generation for code-signing certificates found on malware. Generates a ready-to-send report for the issuing CA — with optional push to the Cert Graveyard database.