sandbox-attacksurface-analysis-tools

sandbox-attacksurface-analysis-tools copied to clipboard

made some custom transport implementation possible

2

Hey, im using your library at work and i needed to make it linux compatible. I made some very minor changes that allowed me to make my own `RpcConnectedClientTransport` implementation....

sum-catnip

For anyone looking to solve build eror with "exited with code 9009" for NtObjectManager

3

I updated the .NET framework to 4.8 for the other projects, and while building NtObjectManager, it failed. So I downgraded it to .NET framework 4.7.2. And compiled both NtApiDotNet and...

kiwids0220

System.AccessViolationException using RpcEndpointMapper against Windows Server 2022 Host

1

**Code to Reproduce:** ``` foreach (var computer in computers) { var potentialString = $"ncacn_ip_tcp:{computer}"; var results = RpcEndpointMapper.QueryEndpoints(potentialString); foreach (var result in results) { if (result.ProtocolSequence == "ncacn_ip_tcp") { Console.WriteLine($"Got...

jameswestgate

boontham33345

When I am calling `RpcServer.ParsePeFile` like that: ``` string name = @"C:\Windows\winsxs\x86_wcf-system.identitymodel_b03f5f7f11d50a3a_10.0.19041.1_none_e690fdc7d17e3f70\System.IdentityModel.dll"; string symbolsPath = @"srv*c:\symbols*http://msdl.microsoft.com/download/symbols"; string dbgHelp = @"C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\dbghelp.dll"; NtApiDotNet.Win32.RpcServer.ParsePeFile(name, dbgHelp , symbolsPath , NtApiDotNet.Win32.RpcServerParserFlags.None); ```...

g3rzi

Kerberos Updates

1

I assume this can be a longer term PR as I work out the best ways to contribute. I've made some initial changes to help support updating and re-packing tickets,...

monoxgas

Hi. I wrote wnf tools and dump well-known wnf names from perf_nt_c.dll on Windows 11 build 22000. The sha256 of perf_nt_c.dll is `ca5a5b64b3bfa9dc43b020f5b81ee6055a6a62ed6507adb00209b31e28791c8f`.

daem0nc0re

Win32Utils has a CreateWindowStation function, but did not have any helper methods to create custom desktops via CreateDesktop and CreateDesktopEx.

ashley-pillay

[Enhancement/Idea]A token viewer with export option and capability to compare two processes security parameters would be nice to have

1

Token viewer is a very nice tool which is useful in wide variety of use cases w.r.t analysis of a process's security. It would be great if the below use...

GiantPluto

 the two softwares with different version can show different num of typora process I think the latest commits shows wrong

bb33bb