Skip to content

DEMONSTRATION_GUIDE.md

Latest commit

 

History

History
195 lines (151 loc) · 5.64 KB

DEMONSTRATION_GUIDE.md

File metadata and controls

195 lines (151 loc) · 5.64 KB
Raw

ShadowPrint Demonstration Guide 🎥

This guide will help you create an impressive demonstration of ShadowPrint's capabilities for recording or live presentations.

🎯 What You'll Demonstrate

  1. Certificate Cloning: Show how SSL certificates are cloned from legitimate websites
  2. Executable Signing: Demonstrate digital signing of executables
  3. AV Evasion: Explain how this bypasses antivirus detection
  4. Security Implications: Discuss the cybersecurity implications

🚀 Quick Start Demo

Step 1: Setup Environment

# Activate virtual environment
source shadowprint_demo/bin/activate

# Run the setup script
python3 demo_setup.py

Step 2: Run Demonstration

# Execute the demo script
./demo.sh

📹 Recording Script for Video

Here's a script you can follow while recording:

Introduction (0:00 - 0:30)

"Welcome to this demonstration of ShadowPrint, a powerful tool for AV evasion 
and certificate spoofing. Today I'll show you how this tool can clone SSL 
certificates from legitimate websites and use them to digitally sign executables."

Step 1: Show Original File (0:30 - 1:00)

"First, let's look at our sample executable. This is a harmless Python script 
that we'll use for demonstration. Notice it's just a regular file with no 
digital signature."

Action: Run ls -la sample_app.py and show the file contents

Step 2: Demonstrate Certificate Cloning (1:00 - 2:00)

"Now, let's see the magic happen. I'll use ShadowPrint to clone the SSL 
certificate from Google's website. This tool will download Google's certificate, 
clone its properties, and create a new certificate with the same details."

Action: Run python3 ShadowPrint_v2.py --host google.com sample_app.py signed_sample_app.exe

Step 3: Show Results (2:00 - 3:00)

"Amazing! Look what happened. ShadowPrint has:
1. Downloaded Google's SSL certificate
2. Created a cloned certificate with identical properties
3. Generated the necessary key files
4. Digitally signed our executable

Now our file appears to be signed by Google!"

Action: Show the generated files and certificate details

Step 4: Explain Security Implications (3:00 - 4:00)

"This demonstrates a serious security vulnerability. An attacker could:
- Clone certificates from trusted companies
- Sign malicious software with these certificates
- Potentially bypass antivirus software
- Make malware appear legitimate

This is why certificate security is crucial in cybersecurity."

🎬 Advanced Demonstration Ideas

Multiple Website Certificates

# Show different certificates
python3 ShadowPrint_v2.py --host microsoft.com sample_app.py microsoft_signed.exe
python3 ShadowPrint_v2.py --host github.com sample_app.py github_signed.exe

Certificate Comparison

# Compare original vs cloned certificates
openssl x509 -in certs/google.com.crt -text -noout > google_cloned.txt
# Then compare with actual Google certificate

Before/After Analysis

# Show file differences
file sample_app.py
file signed_sample_app.exe
ls -la sample_app.py signed_sample_app.exe

📊 What to Highlight in Your Demo

Technical Features

  • ✅ Cross-platform compatibility (Windows, Linux, macOS)
  • ✅ Automatic certificate cloning
  • ✅ Multiple signing options
  • ✅ Timestamp server integration

Security Implications

  • ⚠️ Certificate spoofing capabilities
  • ⚠️ AV evasion techniques
  • ⚠️ Trust manipulation
  • ⚠️ Digital signature forgery

Educational Value

  • 📚 Understanding SSL/TLS certificates
  • 📚 Digital signature mechanisms
  • 📚 Antivirus bypass techniques
  • 📚 Cybersecurity defense strategies

🎥 Recording Tips

Screen Recording Setup

  1. Terminal: Use a dark theme with large fonts
  2. Resolution: 1920x1080 or higher
  3. Audio: Clear microphone, minimal background noise
  4. Pacing: Speak slowly, explain each step

Visual Elements

  • Show file listings before and after
  • Display certificate details
  • Highlight the certs/ directory contents
  • Use color coding in terminal output

Key Moments to Capture

  • The moment the certificate is downloaded
  • Certificate file generation
  • Successful signing completion
  • File size and permission changes

🔒 Safety and Ethics Reminder

IMPORTANT: Always include these disclaimers in your demonstration:

  1. "This tool is for educational purposes only"
  2. "Only use on systems you own or have permission to test"
  3. "This demonstrates security vulnerabilities that need to be addressed"
  4. "Use responsibly and ethically"

📝 Sample Output for Documentation

Your demonstration should produce output similar to:

🔍 ShadowPrint Demonstration
================================

📋 Step 1: Show the original file
File: sample_app.py
Size: 1.2K
Permissions: -rwxr-xr-x

📋 Step 2: Demonstrate certificate cloning from google.com
Running: python3 ShadowPrint_v2.py --host google.com sample_app.py signed_sample_app.exe

 +-+-+-+-+-+-+-+-+-+-+-+-+
 |S|h|a|d|o|w|P|r|i|n|t|
 +-+-+-+-+-+-+-+-+-+-+-+-+

  ShadowPrint v2.0
  Author: BadBoy17

[+] Fetching certificate from google.com:443
[+] Signing with osslsigncode on Unix-like system
[+] Signing completed
[+] Cleaning up temporary files

📋 Step 3: Show the signed file
✅ Successfully created signed_sample_app.exe
Size: 1.2K

🎯 Demonstration Complete!

🎯 Conclusion

This demonstration effectively shows:

  • How ShadowPrint works
  • The power of certificate spoofing
  • Why digital security matters
  • The importance of responsible disclosure

Remember to emphasize the educational value and ethical use of such tools in cybersecurity research and defense.