Quick #PowerShell to find certificates with #Superfish

Right now a lot of IT admins are running around looking at laptops for a nasty cert that comes pre-installed from a certain manufacturer. You can read what all the uproar is about from the article below. My PowerShell needed a little refresh so this was a fun exercise.

 

Here is a quick way to search your certs with PowerShell.

dir cert:\ -rec | select-String -inputobject {$_.Subject} -pattern ‘Superfish’

This gives you string results rather than a count of results.

  • And here is a full search of every field with string results…
dir cert:\ -rec | select-String -inputobject {$_} -pattern ‘Superfish’

 

Arstechnica article

arstechnica.com/security/2015/02/lenovo-pcs-ship-with-man-in-the-middle-adware-that-breaks-https-connections/

Share

About the author

-Blog my research related to metadata, digital forensics and other technical topics.
-Develop software solutions for EasyMetaData.com
-Licensed Computer Forensics Investigator for G-C Partners
-World Traveler!

UA-8105999-2