Reviews
There are no reviews yet. Be the first to send feedback to the community and the maintainers!
Repository Details
Various not-for-production proofs of concept around sandboxing
More Repositories
1
adeleg
Active Directory delegation management toolRust
271
2
ntsec
Standalone tool to explore the security model of Windows and its NT kernel. Use it to introspect privilege assignments and access right assignments, enumerate attack surfaces from the point of view of a sandboxed process, etc.C
29
3
evtq
Windows eventlog formatting, live fetching and querying utility in CRust
17
4
lsobj
Lists all visible objects in the Windows kernel object namespace, a command-line WinObjC
11
5
win32k-mitigation
A test project to try the new win32k.sys system call filtering mitigation in Windows 10C
10
6
muslkl
A unikernel builder based on MUSL + LKL, designed to run any vanilla application inside an SGX enclaveC
10
7
libiris
libiris is a (work in progress) cross-platform sandboxing libraryRust
10
8
captrace
Lists capabilities used by processes on your system as they are requested, to assist in the task of creating custom hardened profiles for containers and sandboxes.C
7
9
winsddl
Windows Security Descriptor Definition Language (SDDL) parser and formatterPython
7
10
dracut-dropbear-unlock
A minimalist dracut module that allows you to remotely unlock an encrypted root partition during boot.Shell
5
11
windows-service
Minimal Windows service boilerplateC
4
12
tristitude
A simple process security policy enumerator. This project has been superseded by https://github.com/mtth-bfft/ntsec , which now has the same functionalities and many more :)C
4
13
windows-service-dll
Minimal Windows service boilerplate packaged as DLLC
3
14
nt-object-types
Toy project to explore the NT kernel's object types and their security access rightsC
3
15
kblist
Windows Update website crawler to list security updates by version and type (cumulative/non-cumulative)Python
3
16
seccomp-dump
A small utility to fetch the seccomp BPF filter used by a thread from the kernel, and disassemble/study itC
2
17
tpm-otp
A minimal tool that communicates with your TPM during boot, to display a one-time password and prove bootchain integrity.C
2
18
simplvpn
A standalone script to manage OpenVPN server and client configurations.Shell
2
19
seccomp-analyze
A seccomp BPF filter verifier written in Prolog, to parse, analyze and list system calls and arguments allowed by a given filter.Prolog
2
20
ipc-benchmarks
Benchmarks for various IPC mechanisms on various OSesC
1
21
repadmin-parser
Minimal Python parser for Microsoft's repadmin replication metadata listingsPython
1
22
dyndnsmon
Live monitor for failed dynamic DNS updates on Windows ServerC++
1