issues
search
googleprojectzero
/
sandbox-attacksurface-analysis-tools
Set of tools to analyze Windows sandboxes for exposed attack surface.
Apache License 2.0
2.04k
stars
428
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Bug: Failure to parse token security attributes results in exception
#79
nurfed1
closed
1 week ago
1
Get-AccessibleWnf: Access denied errors
#78
leechristensen
closed
3 months ago
1
Add wrappers for CreateBindLink and RemoveBindLink APIs
#77
kobykahane
closed
3 months ago
5
bug fix in <NtFile>.Read(<length>), null is not 0 in RunFileCallSync
#76
bravosierra99
closed
5 months ago
4
Procedure names auto-labeled incorrectly when symbols fail to resolve
#75
leechristensen
closed
6 months ago
3
Added methods to help decode NDR64
#74
hackett92
opened
7 months ago
1
TokenViewer: Create Process -> black window?
#73
144mb
opened
10 months ago
1
Why is 2.0.0 on the PSGallery but not on Github?
#72
cs-shadowbq
opened
11 months ago
5
Fix parsing of NDR Union arm types
#71
qtc-de
closed
11 months ago
5
Errors on Win10 22H2
#70
RosenZhu
closed
1 year ago
1
Fix for ParseEnvironmentBlock - switching to ordinal search for end_index
#69
lowleveldesign
closed
1 year ago
1
Is there a way to check if a certain fields threw an exception when using NtFile.Open?
#68
g3rzi
opened
1 year ago
0
Getting Access Denied when calling NtFile.Open on a named pipe
#67
g3rzi
closed
1 year ago
1
Security Policy violation Binary Artifacts
#66
google-allstar-prod[bot]
closed
1 year ago
2
Get-NtNamedPipeFile failed with "Object Name invalid"
#65
g3rzi
closed
1 year ago
2
How to Get-NtNamedPipeFile programmatically?
#64
g3rzi
closed
1 year ago
2
Get-NtApiSet seems to not resolve ALL ApiSet versions
#63
jaredcatkinson
closed
1 year ago
2
some process can not show?
#62
bb33bb
closed
1 year ago
0
[Question] - Link NewCredentials To Process
#61
mattcargile
opened
1 year ago
0
Avoid `-` characters in generated union names
#60
monoxgas
closed
2 years ago
1
made some custom transport implementation possible
#59
sum-catnip
opened
2 years ago
2
For anyone looking to solve build eror with "exited with code 9009" for NtObjectManager
#58
kiwids0220
opened
2 years ago
3
Fixed memory corruption bug when obtaining 64bit thread context
#56
CCob
closed
2 years ago
1
System.AccessViolationException using RpcEndpointMapper against Windows Server 2022 Host
#55
jameswestgate
opened
2 years ago
1
Windows Defender is reporting this module as trojan
#54
SoftwareRat
closed
2 years ago
1
RpcServer.ParsePeFile throw and uncatchable error
#53
g3rzi
opened
2 years ago
0
compile error
#52
bb33bb
closed
2 years ago
2
Kerberos Updates
#51
monoxgas
closed
2 years ago
1
NtApiDotNet.Win32.RpcServer.ParsePeFile doesn't return RPC servers
#50
g3rzi
closed
2 years ago
2
Does Params object contains too much parameters: "Cannot find an overload..."
#49
g3rzi
closed
2 years ago
5
Can Get-RpcAlpcServer retrieve information from process inside a container?
#48
g3rzi
closed
2 years ago
2
How to get RPC procedures from the Endpoints
#47
g3rzi
closed
2 years ago
2
[Enhancement/Idea] Get RPC server by the running process PID
#46
g3rzi
closed
2 years ago
1
Update Well-Known WNF Names
#45
daem0nc0re
opened
2 years ago
0
Added functions to create custom desktops with CreateDesktop and CreateDesktopEx
#44
ashley-pillay
opened
2 years ago
0
Added functions to create custom desktops with CreateDesktop and CreateDesktopEx
#43
ashley-pillay
closed
2 years ago
0
Fix scoping issue for CredentialHandle object
#42
monoxgas
closed
2 years ago
1
Added two service configuration functions; fixed few existing functions calling themselves.
#41
arthur-suleimanov
closed
2 years ago
1
Added two service configuration functions; fixed few existing functions calling themselves.
#40
arthur-suleimanov
closed
2 years ago
1
[Enhancement/Idea]A token viewer with export option and capability to compare two processes security parameters would be nice to have
#39
GiantPluto
opened
2 years ago
1
Binary representation for CLAIM_SECURITY_ATTRIBUTE_V1 (resource attribute) implementation
#38
YuryStrozhevsky
closed
3 years ago
4
Add SACL manipulation
#37
leechristensen
closed
3 years ago
5
RTL_USER_PROCESS_PARAMETERS
#36
arsium
closed
3 years ago
1
Fix issue with INdrStructure type check during unmarshalling and expose authentication context on the RcpConnectedClientTransport class
#35
CCob
closed
3 years ago
1
NtApiDotNet, symbol package and SourceLink
#34
the-exodus
closed
3 years ago
4
GitHub Actions?
#33
rgl
closed
3 years ago
2
Fixed parameter passthrough in SecurityDescriptor.AddAccessAllowedAce
#32
anhaehne
closed
3 years ago
3
Provide .net standard nuget packages
#31
anhaehne
closed
3 years ago
3
Win32Utils: Incorrect spelling in CreateSecurityCapabilities
#30
WildByDesign
closed
3 years ago
1
Get-AccessibleFile feature
#29
nurfed1
closed
3 years ago
2
Next