Wednesday, February 29, 2012

SWIFT Crest NSL v3.2

Crest NSL is a java app that installs from a non-MSI installation executable and appears to provide a Network Security Layer (NSL) in someway.  It is easily captured. During the installation it installs MS VC++ 2005 x86 and MS VC++ 2008 x86 redistributables.  You may want to split these out as dependencies.  The latter is straightforward to retrieve from the temp folders during an interactive installation.  The former appears only fleetingly in the temp folder while it is being called during the installation.  Make a quick copy of the temp folder during the interactive installation run so that you can turn the MS VC++ 2005 x86 redistributable into a dependency package.

The shortcut is a link to an HTML file and launches in IE.  The target HTML file has ActiveX components which the browser will most likely require the user to authorise for security reasons.  It is unlikely you will be able to work around this because the browser settings are probably (should be) controlled by group policy.

The NSL Manager link on this page will launch a java applet which will also require the user to authorise.  They should select the "Always trust" tick box.  Again it unlikely this can be handled by the package due to the nature of the command line keystore management utilities in java.