Tenable Vulnerability Management | WinVerifyTrust Signature Validation CVE-2013-3900 Remediation

In this tutorial we'll be using Tenable Vulnerability Management to research the WinVerifyTrust Signature Validation CVE-2013-3900 Remediation vulnerability. We'll then review the registry and required keys and then use PowerShell to add the proper keys to the registry.
New-Item -Path "HKLM:\Software\Microsoft\Cryptography\Wintrust"
New-Item -Path "HKLM:\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config"
New-ItemProperty -Path "HKLM:\Software\Microsoft\Cryptography\Wintrust\Config" -Name "EnableCertPaddingCheck" -Value 1 -PropertyType DWord
New-Item -Path "HKLM:\Software\Wow6432Node\Microsoft\Cryptography\Wintrust"
New-Item -Path "HKLM:\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config"
New-ItemProperty -Path "HKLM:\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config" -Name "EnableCertPaddingCheck" -Value 1 -PropertyType DWord
Join the Cybersecurity Mentorship Program Official Launch!
technologyinte...
Join this channel to get access to perks:
/ @technologyinterpreter...
Subscribe: www.youtube.co...
Social Media:
Discord: / discord
Twitter: / techtranslators
Twitch: / technologyinterpreters
Instagram: / technologyinterpreters
Facebook: / technologyinterpreters

[@KristenWieland]

Exactly what I needed - registry key folder missing. Thanks a ton!!

[@jklivinlife]

Great Video. thanks for the help. What software do you use to put the video of you in the corner as you share your screen? thanks

[@thejadedbuddha]

Cyvatar is the best!! ❤

[@jaakuytenhaak7332]

I'm not learning something here. Mitigating this vulnerability doesn't require that much of a skill, I rather learn how to vulnerability is actually affecting my environment so I can do a better risk assessment. In other words, I need a PoC.