Download GoSign Grapho: The App for Graphometric Signature
GoSign is a free app for Android published in the PIMS & Calendars list of apps, part of Business.The company that develops GoSign is InfoCert SpA. The latest version released by its developer is 6.9.0.To install GoSign on your Android device, just click the green Continue To App button above to start the installation process. The app is listed on our website since 2023-05-25 and was downloaded 19 times. We have already checked if the download link is safe, however for your own protection we recommend that you scan the downloaded app with your antivirus. Your antivirus may detect the GoSign as malware as malware if the download link to it.infocert.mobile.dike is broken.How to install GoSign on your Android device:Click on the Continue To App button on our website. This will redirect you to Google Play.
Once the GoSign is shown in the Google Play listing of your Android device, you can start its download and installation. Tap on the Install button located below the search bar and to the right of the app icon.
A pop-up window with the permissions required by GoSign will be shown. Click on Accept to continue the process.
GoSign will be downloaded onto your device, displaying a progress. Once the download completes, the installation will start and you'll get a notification after the installation is finished.
If you use a device with iOS operating system, to download the App GoSign Mobile you have to go to the Apple Store, searching GoSign Mobile, once you find the application press on the Get button.
download gosign
If you use a device with Android operating system, to download the App GoSign Mobile you have to go to the Play Store, searching GoSign Mobile, once you find the application press on the Install button.
Once the document is selected, it will be added to the gosign Mobile Added folder. This is the recommended procedure to share mobile phone documents with the GoSign Mobile App and if your device works with an operating system iOS, it will be the only procedure allowed.
GoSign is also available as a free app for Android and iPhone/iPad devices. Those who have activated a Business license or a Business+Grapho license can also download the GoSign Business app for Android and iOS/iPadOS and the GoSign Grapho app (which allows for graphometric signatures on tablets) for Android and iPad devices.
How to download gosign app for free
Benefits of using gosign for electronic signature
Download gosign and sign documents online
Gosign review: best e-signature solution
How to get an e-signature with gosign
Download gosign and save time and money
Gosign vs other e-signature platforms
How to use gosign for document management
Download gosign and improve your workflow
Gosign features and pricing
How to download gosign for Windows, Mac, Android, or iOS
How to create and send documents with gosign
Download gosign and collaborate with your team
Gosign security and compliance
How to verify a signed document with gosign
Download gosign and access your documents anywhere
How to integrate gosign with other apps
Download gosign and customize your signature
Gosign customer support and feedback
How to invite others to sign a document with gosign
Download gosign and organize your documents in folders
How to edit and annotate documents with gosign
Download gosign and track the status of your documents
Gosign testimonials and case studies
How to cancel or update your gosign subscription
Once the download is complete, open the .dmg package you just downloaded, move GoSign to the Applications folder of macOS and open the path in question. Now, right-click on the GoSign icon and select Open twice in a row to bypass macOS restrictions on applications from non-certified developers (this is only required on first startup).
Once the download is complete, press the Open button (or select the app icon from the Home screen or App Library), to launch GoSign, tap on the Start item and press the Next (twice in a row) and Close buttons.
GoSignMonitor is a helper service that calls and if a new version is available the service downloads and extracts the zip into the installation directory. Yes, over unencrypted connection as LocalSystem. And it does it every 10 minutes. While less likely in case of an office user, in a private user case it opens the computer to a Remote Code Execution (RCE) for an attacker capable of intercepting the unencrypted traffic like in public WIFI network. The GoSign service is stopped before the zip extraction and restarted afterwards. Since the attacker-controlled executable is started as LocalSystem it means a complete computer takeover.
It was attempted to address the issue. The newer version of GoSignMonitor checks for updates and downloads them over HTTPS. Still, because of a mistake the automatic update process extracts the new version of the executable into the wrong folder: C:\Program Files (x86)\RCSC\GoSign\GoSignMonitor\GoSignMonitor\GoSignMonitor.exe. This way the existing users of GoSign are left vulnerable and need to manually uninstall the old version and install the version 3.3.4.0 themselves.
The /rest/loadApp API commands GoSignUI to automatically download a file from the specified url, extract it if it is an archive and open in AutoDesk TrueView 2018 or AutoDesk DesignReview 2018 viewer. Proof of Concept:
2020.09.25-29 - Contacted info@gosign.lt, info@elektroninis.lt, info@registrucentras.lt asking for the security contact.2020.10.01 - A report was sent to pagalba@elektroninis.lt.2020.10.01 - The report was acknowledged.2020.12.21 - Received an email that v3.3.4.0 with the fixes was released.2020.12.28 - Vendor was notified about the not fixed issues.2020.12.30 - Disclosure deadline reached.