mirrors
/
rufus
mirror of https://github.com/pbatard/rufus.git
2
0
Fork 0
Code Issues Projects Releases Wiki Activity
The Reliable USB Formatting Utility
1,187 Commits 7 Branches 80 Tags 58 MiB
C 87.6%
Makefile 6.3%
DIGITAL Command Language 2.5%
C# 1.3%
Shell 0.9%
Other 1.3%
Go to file
Pete Batard c3c39f7f8a [pki] fix https://www.kb.cert.org/vuls/id/403768 
* This commit effectively fixes https://www.kb.cert.org/vuls/id/403768 (CVE-2017-13083) as
  it is described per its revision 11, which is the latest revision at the time of this commit,
  by disabling Windows prompts, enacted during signature validation, that allow the user to
  bypass the intended signature verification checks.
* It needs to be pointed out that the vulnerability ("allow(ing) the use of a self-signed
  certificate"), which relies on the end-user actively ignoring a Windows prompt that tells
  them that the update failed the signature validation whilst also advising against running it,
  is being fully addressed, even as the update protocol remains HTTP.
* It also need to be pointed out that the extended delay (48 hours) between the time the
  vulnerability was reported and the moment it is fixed in our codebase has to do with
  the fact that the reporter chose to deviate from standard security practices by not
  disclosing the details of the vulnerability with us, be it publicly or privately,
  before creating the cert.org report. The only advance notification we received was a
  generic note about the use of HTTP vs HTTPS, which, as have established, is not
  immediately relevant to addressing the reported vulnerability.
* Closes #1009
* Note: The other vulnerability scenario described towards the end of #1009, which
  doesn't have to do with the "lack of CA checking", will be addressed separately.
 		2017-08-31 12:19:11 +01:00
.github [internal] update issue template 2016-11-11 10:59:18 +00:00
res [pki] fix https://www.kb.cert.org/vuls/id/403768 2017-08-31 12:19:11 +01:00
src [pki] fix https://www.kb.cert.org/vuls/id/403768 2017-08-31 12:19:11 +01:00
.amend.cmd [misc] fix getopt build path for Visual Studio 2015-06-16 19:04:43 +01:00
.gitattributes [misc] ensure 'missing' is checked out as LF 2015-11-18 00:21:56 +00:00
.gitignore v2.15 (build 1117) 2017-05-16 12:37:46 +01:00
ChangeLog.txt [misc] fix typo in Changelog 2017-07-31 12:31:26 +01:00
LICENSE.txt [misc] refactoring and cleanup - part 2 2013-01-25 01:56:28 +00:00
Makefile.am [misc] move appx generation to Makefile 2017-05-09 10:54:13 +01:00
Makefile.in [misc] move appx generation to Makefile 2017-05-09 10:54:13 +01:00
README.md v2.16 (build 1170) 2017-07-31 10:55:41 +01:00
_chver.sh [misc] add build data for Windows Apps Store 2017-04-20 12:59:46 +01:00
_coverity.cmd [misc] fix Coverity warnings 2017-07-25 12:19:50 +01:00
_post-commit.sh [misc] Linux cross compilation fixes 2016-11-11 11:58:05 +00:00
_pre-commit.sh [misc] try to make that darn Appx taskbar icon transparent 2017-05-14 13:23:45 +01:00
_release.sh [misc] move appx generation to Makefile 2017-05-09 10:54:13 +01:00
_set_git_hooks.sh [misc] fix getopt build path for Visual Studio 2015-06-16 19:04:43 +01:00
_sign.cmd [ui] improve logging data 2017-04-25 14:32:19 +01:00
aclocal.m4 [misc] update MinGW build chain for msys2 2014-12-15 18:42:21 +00:00
appveyor.yml [grub] update Grub4DOS to latest 2017-05-15 12:45:03 +01:00
bootstrap.sh [misc] Linux cross compilation fixes 2016-11-11 11:58:05 +00:00
compile [misc] update MinGW build chain for msys2 2014-12-15 18:42:21 +00:00
configure [misc] add static_strcat & static_strcpy and use static_ calls wherever possible 2017-08-10 19:43:52 +01:00
configure.ac [misc] add static_strcat & static_strcpy and use static_ calls wherever possible 2017-08-10 19:43:52 +01:00
install-sh [internal] update app URL as well as scripts 2011-12-09 22:47:44 +00:00
missing [misc] update MinGW build chain for msys2 2014-12-15 18:42:21 +00:00
rufus (Clang).sln [misc] update Clang solution for VS2017 2017-03-09 12:37:53 +01:00
rufus.sln [arm] add ARM compilation support (MSVC) 2017-05-15 12:04:03 +01:00

README.md

Rufus: The Reliable USB Formatting Utility

Build status Coverity Scan Build Status Licence

Rufus logo

Features

  • Format USB, flash card and virtual drives to FAT/FAT32/NTFS/UDF/exFAT/ReFS
  • Create DOS bootable USB drives, using FreeDOS or MS-DOS (Windows 8.1 or earlier)
  • Create BIOS or UEFI bootable drives, including UEFI bootable NTFS
  • Create bootable drives from bootable ISOs (Windows, Linux, etc.)
  • Create bootable drives from bootable disk images, including compressed ones
  • Create Windows To Go drives
  • Compute MD5, SHA-1 and SHA-256 checksums of the selected image
  • Twice as fast as Microsoft's USB/DVD tool or UNetbootin, on ISO -> USB creation (1)
  • Perform bad blocks checks, including detection of "fake" flash drives
  • Modern and familiar UI, with 39 languages natively supported
  • Small footprint. No installation required.
  • Portable
  • 100% Free Software (GPL v3)

Compilation

Use either Visual Studio (2017 or later) or MinGW and then invoke the .sln or configure/make respectively.

Visual Studio

Note that, since Rufus is an OSI compliant Open Source project, you are entitled to download and use the freely available Visual Studio Community Edition to build, run or develop for Rufus. As per the Visual Studio Community Edition license this applies regardless of whether you are an individual or a corporate user.

Additional information

Rufus provides extensive information about what it is doing, either through its easily accessible log, or through the Windows debug facility.

Enhancements/Bugs

Please use the GitHub issue tracker for reporting problems or suggesting new features.

(1) Tests carried out with a 16 GB USB 3.0 ADATA pen drive on a Core 2 duo/4 GB RAM platform running Windows 7 x64. ISO: en_windows_7_ultimate_with_sp1_x64_dvd_618240.iso

Name of tool Version Time
Windows USB/DVD Download Tool v1.0.30 8 mins 10s
UNetbootin v1.1.1.1 6 mins 20s
Rufus v1.1.0 3 mins 25s