Research: Capability SIDs / Temporary SIDs

MaulingMonkey / firehazard

Unopinionated low level API bindings focused on soundness, safety, and stronger types over raw FFI.

Other

9 stars 0 forks source link

Research: Capability SIDs / Temporary SIDs #9

Open MaulingMonkey opened 2 years ago

MaulingMonkey commented 2 years ago

https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-identifiers#capability-sids
https://docs.microsoft.com/en-us/troubleshoot/windows-server/windows-security/sids-not-resolve-into-friendly-names

Can I create my own capability SIDs? How? Use them for non-appcontainer uses? Are these related to chromium installer SIDs? What about creating my own temporary per-session SIDs? ...?

MaulingMonkey commented 2 years ago

https://github.com/MaulingMonkey/firehazard/commit/56ef3bb1ccb6a1d56659ed16a72065efc71ff6b5 capability sid wrangling