Skip to content

Commit 6df5114

Browse files
tyranidtyranid
committed
Updated to v1.1.29.
1 parent 212c1cc commit 6df5114

File tree

11 files changed

+221
-67
lines changed

11 files changed

+221
-67
lines changed

‎NtApiDotNet.Forms/NtApiDotNet.Forms.1.1.29.snupkg‎

11.3 KB
Binary file not shown.

‎NtApiDotNet.Forms/NtApiDotNet.Forms.nuspec‎

Lines changed: 69 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,69 @@
1+
<?xml version="1.0"?>
2+
<package >
3+
<metadata>
4+
<id>$id$</id>
5+
<version>$version$</version>
6+
<title>NtApiDotNet.Forms</title>
7+
<authors>James Forshaw</authors>
8+
<owners>James Forshaw</owners>
9+
<license type="expression">Apache-2.0</license>
10+
<projectUrl>https://github.com/googleprojectzero/sandbox-attacksurface-analysis-tools</projectUrl>
11+
<requireLicenseAcceptance>false</requireLicenseAcceptance>
12+
<description>A .NET class library to access native NT API system calls. This contains just the forms code.</description>
13+
<releaseNotes>
14+
1.1.29
15+
--------
16+
* Added Get-NtProcessUser.
17+
* Added Get-NtProcessEnvironment.
18+
* Added global option for New-NtSymbolicLink.
19+
* Added Split-Win32CommandLine.
20+
* Added send and post methods to NtMessage.
21+
* Added AsObject parameter for Get-NtObjectInformation.
22+
* Added NtMailslotFile and fixed mailslot creation.
23+
* Added Get-NtKeySymbolicLinkTarget.
24+
* Added support for a FollowLink switch which will allow accessible cmdlets to follow symbolic links. Feature request #29.
25+
* Separated forms code from the main assembly.
26+
* Added setting service security and Get/Set-Win32ServiceSecurityDescriptor.
27+
* Added Win32 debug console class and Start/New/Read-Win32DebugConsole.
28+
* Added Test-NtTokenCapability.
29+
* Added New-Win32Service and Remove-Win32Service.
30+
* Reimplemented SidName to allow access to the Domain component.
31+
* Added section characteristics check when parsing RPC servers. Fix for issue #27.
32+
* Added an SDKName attribute to access rights.
33+
* Added Add-NtAccountRight and Remove-NtAccountRight.
34+
* Added basic VBS enclave support.
35+
* Added support to parse ELAM information from a binary.
36+
* Added Get-NtSigningLevel and Get-X509Certificate.
37+
* Added Compare-NtSigningLevel.
38+
* Added silo impersonation commands.
39+
* Added option to impersonation System when creating a token or with Invoke-NtToken.
40+
* Added proper enumeration of AppContainer profiles and support creating with capabilities.
41+
* Added Get-AppModelApplicationPolicy.
42+
* Added Get-NtThreadContext and Set-NtThreadContext.
43+
* Added support for calling CreateProcessWithLogon via Win32Process.
44+
* Added Start-AppModelApplication.
45+
* Added Add-NtThreadApc.
46+
* Fixed path handling in Get-Win32SecurityDescriptor.
47+
* Added Get-NtFileFinalPath command.
48+
* Reworked handling of lease oplocks.
49+
* Added basic USN journal support.
50+
* Added Get-NtFileStream.
51+
* Added Get-NtMountPoint command.
52+
* Added basic async support and the Wait-AsyncTaskResult command.
53+
* Added Send-NtFileControl command.
54+
* Added Get-NtFileVolumeInformation and Set-NtFileVolumeInformation.
55+
* Added Get-NtFileItem command.
56+
* Added support for querying device nodes, setup class and interface classes.
57+
* Added Get-NtFileSharingProcess.
58+
* IPeb: Added GetBeingDebugged() (#26)
59+
* Added support for enumerating filter drivers and connecting to ports.
60+
* Added New-NtKeySymbolicLink and Set-NtKeySymbolicLinkTarget.
61+
* Added a Get-NtKeyHive command.
62+
</releaseNotes>
63+
<copyright>Copyright Google Inc. 2016-2020</copyright>
64+
<tags>syscalls</tags>
65+
<dependencies>
66+
<dependency id="NtApiDotNet" version="1.1.29" />
67+
</dependencies>
68+
</metadata>
69+
</package>

‎NtApiDotNet.Forms/Properties/AssemblyInfo.cs‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -32,5 +32,5 @@
3232
// by using the '*' as shown below:
3333
// [assembly: AssemblyVersion("1.0.*")]
3434
[assembly: AssemblyVersion("1.0.0.0")]
35-
[assembly: AssemblyFileVersion("1.1.28.0")]
36-
[assembly: AssemblyInformationalVersion("1.1.28")]
35+
[assembly: AssemblyFileVersion("1.1.29.0")]
36+
[assembly: AssemblyInformationalVersion("1.1.29")]

‎NtApiDotNet/NtApiDotNet.1.1.29.snupkg‎

838 KB
Binary file not shown.

‎NtApiDotNet/NtApiDotNet.Core.csproj‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@
77
<Authors>James Forshaw</Authors>
88
<Company>Google Inc.</Company>
99
<Product>NtApiDotNet</Product>
10-
<FileVersion>1.1.28.0</FileVersion>
10+
<FileVersion>1.1.29.0</FileVersion>
1111
<Copyright>Copyright © Google Inc. 2016-2020</Copyright>
1212
<AssemblyVersion>1.0.0.0</AssemblyVersion>
1313
<PackageLicenseUrl>https://www.apache.org/licenses/LICENSE-2.0</PackageLicenseUrl>

‎NtApiDotNet/NtApiDotNet.nuspec‎

Lines changed: 47 additions & 29 deletions
Original file line numberDiff line numberDiff line change
@@ -11,36 +11,54 @@
1111
<requireLicenseAcceptance>false</requireLicenseAcceptance>
1212
<description>A .NET class library to access native NT API system calls</description>
1313
<releaseNotes>
14-
1.1.28
14+
1.1.29
1515
--------
16-
* Added Import-Win32Module and Get-Win32Module.
17-
* Added support for Registry Keys in the NtObjectManager provider.
18-
* Added Get-NtDirectoryEntry.
19-
* Added Win32 CreateRemoteThread.
20-
* Added addition Registry Key functions.
21-
* Added Network Authentication commands.
22-
* Added Authentication Token formatting commands.
23-
* Added new filtering features to TokenViewer.
24-
* Improved cmdlets for getting and setting object information classes.
25-
* Added Add-NtSection and Remove-NtSection.
26-
* Added Compare-NtObject.
27-
* Added Test-NtTokenPrivilege.
28-
* Added type parsing from PDBs via SymbolResolver.
29-
* Added a summary format to Format-NtSecurityDescriptor.
30-
* Added Out-HexDump.
31-
* Added C# compiler support for .NET Core Support of Get-RpcClient.
32-
* Updated New-NtSecurityDescriptor and Edit-NtSecurityDescriptor.
33-
* Basic C++ NDR formatting from irsl@.
34-
* Added Format-NtJob.
35-
* Added New-NtSecurityAttribute and Get-NtAceConditionData.
36-
* Added Device/User Claims to Token Viewer and Format-NtToken.
37-
* Added many different commands to manipulate Security Descriptors.
38-
* Added Win32 Security Descriptor commands.
39-
* Added filtering for accessible path commands.
40-
* Added Audit support.
41-
* Added basic AuthZ API support.
42-
* Added basic ASN.1 DER parsing and Format-ASN1DER command.
43-
* Added Kerberos Keytab file reading and writing.
16+
* Added Get-NtProcessUser.
17+
* Added Get-NtProcessEnvironment.
18+
* Added global option for New-NtSymbolicLink.
19+
* Added Split-Win32CommandLine.
20+
* Added send and post methods to NtMessage.
21+
* Added AsObject parameter for Get-NtObjectInformation.
22+
* Added NtMailslotFile and fixed mailslot creation.
23+
* Added Get-NtKeySymbolicLinkTarget.
24+
* Added support for a FollowLink switch which will allow accessible cmdlets to follow symbolic links. Feature request #29.
25+
* Separated forms code from the main assembly.
26+
* Added setting service security and Get/Set-Win32ServiceSecurityDescriptor.
27+
* Added Win32 debug console class and Start/New/Read-Win32DebugConsole.
28+
* Added Test-NtTokenCapability.
29+
* Added New-Win32Service and Remove-Win32Service.
30+
* Reimplemented SidName to allow access to the Domain component.
31+
* Added section characteristics check when parsing RPC servers. Fix for issue #27.
32+
* Added an SDKName attribute to access rights.
33+
* Added Add-NtAccountRight and Remove-NtAccountRight.
34+
* Added basic VBS enclave support.
35+
* Added support to parse ELAM information from a binary.
36+
* Added Get-NtSigningLevel and Get-X509Certificate.
37+
* Added Compare-NtSigningLevel.
38+
* Added silo impersonation commands.
39+
* Added option to impersonation System when creating a token or with Invoke-NtToken.
40+
* Added proper enumeration of AppContainer profiles and support creating with capabilities.
41+
* Added Get-AppModelApplicationPolicy.
42+
* Added Get-NtThreadContext and Set-NtThreadContext.
43+
* Added support for calling CreateProcessWithLogon via Win32Process.
44+
* Added Start-AppModelApplication.
45+
* Added Add-NtThreadApc.
46+
* Fixed path handling in Get-Win32SecurityDescriptor.
47+
* Added Get-NtFileFinalPath command.
48+
* Reworked handling of lease oplocks.
49+
* Added basic USN journal support.
50+
* Added Get-NtFileStream.
51+
* Added Get-NtMountPoint command.
52+
* Added basic async support and the Wait-AsyncTaskResult command.
53+
* Added Send-NtFileControl command.
54+
* Added Get-NtFileVolumeInformation and Set-NtFileVolumeInformation.
55+
* Added Get-NtFileItem command.
56+
* Added support for querying device nodes, setup class and interface classes.
57+
* Added Get-NtFileSharingProcess.
58+
* IPeb: Added GetBeingDebugged() (#26)
59+
* Added support for enumerating filter drivers and connecting to ports.
60+
* Added New-NtKeySymbolicLink and Set-NtKeySymbolicLinkTarget.
61+
* Added a Get-NtKeyHive command.
4462
</releaseNotes>
4563
<copyright>Copyright Google Inc. 2016-2020</copyright>
4664
<tags>syscalls</tags>

‎NtApiDotNet/Properties/AssemblyInfo.cs‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -32,5 +32,5 @@
3232
// by using the '*' as shown below:
3333
// [assembly: AssemblyVersion("1.0.*")]
3434
[assembly: AssemblyVersion("1.0.0.0")]
35-
[assembly: AssemblyFileVersion("1.1.28.0")]
36-
[assembly: AssemblyInformationalVersion("1.1.28")]
35+
[assembly: AssemblyFileVersion("1.1.29.0")]
36+
[assembly: AssemblyInformationalVersion("1.1.29")]

‎NtObjectManager/NtObjectManager.Core.csproj‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@
77
<Authors>James Forshaw</Authors>
88
<Company>Google Inc.</Company>
99
<Product>NtObjectManager</Product>
10-
<FileVersion>1.1.28.0</FileVersion>
10+
<FileVersion>1.1.29.0</FileVersion>
1111
<Copyright>Copyright © Google Inc. 2016-2020</Copyright>
1212
<AssemblyVersion>1.0.0.0</AssemblyVersion>
1313
<PackageLicenseUrl>https://www.apache.org/licenses/LICENSE-2.0</PackageLicenseUrl>

‎NtObjectManager/NtObjectManager.psd1‎

Lines changed: 48 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@
1818
RootModule = 'NtObjectManager.psm1'
1919

2020
# Version number of this module.
21-
ModuleVersion = '1.1.28'
21+
ModuleVersion = '1.1.29'
2222

2323
# ID used to uniquely identify this module
2424
GUID = 'ac251c97-67a6-4bc4-bb8a-5ae300e93030'
@@ -180,36 +180,54 @@ PrivateData = @{
180180
ProjectUri = 'https://github.com/googleprojectzero/sandbox-attacksurface-analysis-tools'
181181

182182
# ReleaseNotes of this module
183-
ReleaseNotes = '1.1.28
183+
ReleaseNotes = '1.1.29
184184
--------
185-
* Added Import-Win32Module and Get-Win32Module.
186-
* Added support for Registry Keys in the NtObjectManager provider.
187-
* Added Get-NtDirectoryEntry.
188-
* Added Win32 CreateRemoteThread.
189-
* Added addition Registry Key functions.
190-
* Added Network Authentication commands.
191-
* Added Authentication Token formatting commands.
192-
* Added new filtering features to TokenViewer.
193-
* Improved cmdlets for getting and setting object information classes.
194-
* Added Add-NtSection and Remove-NtSection.
195-
* Added Compare-NtObject.
196-
* Added Test-NtTokenPrivilege.
197-
* Added type parsing from PDBs via SymbolResolver.
198-
* Added a summary format to Format-NtSecurityDescriptor.
199-
* Added Out-HexDump.
200-
* Added C# compiler support for .NET Core Support of Get-RpcClient.
201-
* Updated New-NtSecurityDescriptor and Edit-NtSecurityDescriptor.
202-
* Basic C++ NDR formatting from irsl@.
203-
* Added Format-NtJob.
204-
* Added New-NtSecurityAttribute and Get-NtAceConditionData.
205-
* Added Device/User Claims to Token Viewer and Format-NtToken.
206-
* Added many different commands to manipulate Security Descriptors.
207-
* Added Win32 Security Descriptor commands.
208-
* Added filtering for accessible path commands.
209-
* Added Audit support.
210-
* Added basic AuthZ API support.
211-
* Added basic ASN.1 DER parsing and Format-ASN1DER command.
212-
* Added Kerberos Keytab file reading and writing.
185+
* Added Get-NtProcessUser.
186+
* Added Get-NtProcessEnvironment.
187+
* Added global option for New-NtSymbolicLink.
188+
* Added Split-Win32CommandLine.
189+
* Added send and post methods to NtMessage.
190+
* Added AsObject parameter for Get-NtObjectInformation.
191+
* Added NtMailslotFile and fixed mailslot creation.
192+
* Added Get-NtKeySymbolicLinkTarget.
193+
* Added support for a FollowLink switch which will allow accessible cmdlets to follow symbolic links. Feature request #29.
194+
* Separated forms code from the main assembly.
195+
* Added setting service security and Get/Set-Win32ServiceSecurityDescriptor.
196+
* Added Win32 debug console class and Start/New/Read-Win32DebugConsole.
197+
* Added Test-NtTokenCapability.
198+
* Added New-Win32Service and Remove-Win32Service.
199+
* Reimplemented SidName to allow access to the Domain component.
200+
* Added section characteristics check when parsing RPC servers. Fix for issue #27.
201+
* Added an SDKName attribute to access rights.
202+
* Added Add-NtAccountRight and Remove-NtAccountRight.
203+
* Added basic VBS enclave support.
204+
* Added support to parse ELAM information from a binary.
205+
* Added Get-NtSigningLevel and Get-X509Certificate.
206+
* Added Compare-NtSigningLevel.
207+
* Added silo impersonation commands.
208+
* Added option to impersonation System when creating a token or with Invoke-NtToken.
209+
* Added proper enumeration of AppContainer profiles and support creating with capabilities.
210+
* Added Get-AppModelApplicationPolicy.
211+
* Added Get-NtThreadContext and Set-NtThreadContext.
212+
* Added support for calling CreateProcessWithLogon via Win32Process.
213+
* Added Start-AppModelApplication.
214+
* Added Add-NtThreadApc.
215+
* Fixed path handling in Get-Win32SecurityDescriptor.
216+
* Added Get-NtFileFinalPath command.
217+
* Reworked handling of lease oplocks.
218+
* Added basic USN journal support.
219+
* Added Get-NtFileStream.
220+
* Added Get-NtMountPoint command.
221+
* Added basic async support and the Wait-AsyncTaskResult command.
222+
* Added Send-NtFileControl command.
223+
* Added Get-NtFileVolumeInformation and Set-NtFileVolumeInformation.
224+
* Added Get-NtFileItem command.
225+
* Added support for querying device nodes, setup class and interface classes.
226+
* Added Get-NtFileSharingProcess.
227+
* IPeb: Added GetBeingDebugged() (#26)
228+
* Added support for enumerating filter drivers and connecting to ports.
229+
* Added New-NtKeySymbolicLink and Set-NtKeySymbolicLinkTarget.
230+
* Added a Get-NtKeyHive command.
213231
'
214232

215233
# External dependent modules of this module

‎NtObjectManager/Properties/AssemblyInfo.cs‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -32,5 +32,5 @@
3232
// by using the '*' as shown below:
3333
// [assembly: AssemblyVersion("1.0.*")]
3434
[assembly: AssemblyVersion("1.0.0.0")]
35-
[assembly: AssemblyFileVersion("1.1.28.0")]
36-
[assembly: AssemblyInformationalVersion("1.1.28")]
35+
[assembly: AssemblyFileVersion("1.1.29.0")]
36+
[assembly: AssemblyInformationalVersion("1.1.29")]

0 commit comments

Comments
 (0)