Skip to content

Commit a0e5948

Browse files
author
James Forshaw
committed
Updated to v1.1.26.
1 parent 43eb48d commit a0e5948

File tree

7 files changed

+70
-31
lines changed

7 files changed

+70
-31
lines changed

‎NtApiDotNet/NtApiDotNet.Core.csproj‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,8 +7,8 @@
77
<Authors>James Forshaw</Authors>
88
<Company>Google Inc.</Company>
99
<Product>NtApiDotNet</Product>
10-
<FileVersion>1.1.25.0</FileVersion>
11-
<Copyright>Copyright © Google Inc. 2016, 2017, 2018, 2019</Copyright>
10+
<FileVersion>1.1.26.0</FileVersion>
11+
<Copyright>Copyright © Google Inc. 2016-2020</Copyright>
1212
<AssemblyVersion>1.0.0.0</AssemblyVersion>
1313
<PackageLicenseUrl>https://www.apache.org/licenses/LICENSE-2.0</PackageLicenseUrl>
1414
<RepositoryUrl>https://github.com/googleprojectzero/sandbox-attacksurface-analysis-tools</RepositoryUrl>

‎NtApiDotNet/NtApiDotNet.nuspec‎

Lines changed: 19 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -11,19 +11,27 @@
1111
<requireLicenseAcceptance>false</requireLicenseAcceptance>
1212
<description>A .NET class library to access native NT API system calls</description>
1313
<releaseNotes>
14-
1.1.24
14+
1.1.26
1515
--------
16-
* Added Add-NtTokenSecurityAttribute and Remove-NtTokenSecurityAttribute cmdlets.
17-
* Added additional properties for running servies.
18-
* Added support for drivers to Get-RunningService and Get-AccesibleService.
19-
* Added fake service NtType objects for services and SCM to allow formatting and the UI.
20-
* Added NtType property to security descriptors.
21-
* Added option to Show-NtToken to elevate to admin.
22-
* Added Suspend, Resume and Stop process commands.
23-
* Added Get-NtEaBuffer and Set-NtEaBuffer commands.
24-
* Added open to Get-NtDebug to get from a process.
16+
* Add DeviceGuid to Get/New-NtFile
17+
* Fixed bug in ETA registrations and added GUID enumeration.
18+
* Added SetExceptionPort to NtProcess.
19+
* Added child process mitigation improvements.
20+
* Added extended Fork.
21+
* Updated native process creation support.
22+
* Various new non-throwing methods.
23+
* Updated to C# 7.3.
24+
* Added list of access rights to NtType.
25+
* Added default mandatory policy to NtType.
26+
* Added SetDisposition methods to NtFile.
27+
* Added console and GUI support for Object ACEs.
28+
* Updated access checking to support Object Types.
29+
* Access check returns a structure rather than just an access mask.
30+
* CPP style NDR formatting (#21)
31+
* Added Get-NtTokenPrivilege command.
32+
* Added Get-NtLocallyUniqueId command.
2533
</releaseNotes>
26-
<copyright>Copyright Google Inc. 2017, 2018, 2019</copyright>
34+
<copyright>Copyright Google Inc. 2016-2020</copyright>
2735
<tags>syscalls</tags>
2836
</metadata>
2937
</package>

‎NtApiDotNet/Properties/AssemblyInfo.cs‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@
99
[assembly: AssemblyConfiguration("")]
1010
[assembly: AssemblyCompany("Google Inc.")]
1111
[assembly: AssemblyProduct("NtApiDotNet")]
12-
[assembly: AssemblyCopyright("Copyright © Google Inc. 2016, 2017, 2018, 2019")]
12+
[assembly: AssemblyCopyright("Copyright © Google Inc. 2016-2020")]
1313
[assembly: AssemblyTrademark("")]
1414
[assembly: AssemblyCulture("")]
1515

@@ -32,5 +32,5 @@
3232
// by using the '*' as shown below:
3333
// [assembly: AssemblyVersion("1.0.*")]
3434
[assembly: AssemblyVersion("1.0.0.0")]
35-
[assembly: AssemblyFileVersion("1.1.25.0")]
36-
[assembly: AssemblyInformationalVersion("1.1.25")]
35+
[assembly: AssemblyFileVersion("1.1.26.0")]
36+
[assembly: AssemblyInformationalVersion("1.1.26")]

‎NtObjectManager/NtObjectManager.Core.csproj‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,8 +7,8 @@
77
<Authors>James Forshaw</Authors>
88
<Company>Google Inc.</Company>
99
<Product>NtObjectManager</Product>
10-
<FileVersion>1.1.25.0</FileVersion>
11-
<Copyright>Copyright © Google Inc. 2016, 2017, 2018, 2019</Copyright>
10+
<FileVersion>1.1.26.0</FileVersion>
11+
<Copyright>Copyright © Google Inc. 2016-2020</Copyright>
1212
<AssemblyVersion>1.0.0.0</AssemblyVersion>
1313
<PackageLicenseUrl>https://www.apache.org/licenses/LICENSE-2.0</PackageLicenseUrl>
1414
<RepositoryUrl>https://github.com/googleprojectzero/sandbox-attacksurface-analysis-tools</RepositoryUrl>

‎NtObjectManager/NtObjectManager.psd1‎

Lines changed: 20 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@
1818
RootModule = 'NtObjectManager.psm1'
1919

2020
# Version number of this module.
21-
ModuleVersion = '1.1.25'
21+
ModuleVersion = '1.1.26'
2222

2323
# ID used to uniquely identify this module
2424
GUID = 'ac251c97-67a6-4bc4-bb8a-5ae300e93030'
@@ -30,7 +30,7 @@ Author = 'James Forshaw'
3030
CompanyName = 'Google Inc.'
3131

3232
# Copyright statement for this module
33-
Copyright = '(c) 2016, 2017, 2018, 2019 Google Inc. All rights reserved.'
33+
Copyright = '(c) 2016-2020 Google Inc. All rights reserved.'
3434

3535
# Description of the functionality provided by this module
3636
Description = 'This module adds a provider and cmdlets to access the NT object manager namespace.'
@@ -117,14 +117,25 @@ PrivateData = @{
117117
ProjectUri = 'https://github.com/googleprojectzero/sandbox-attacksurface-analysis-tools'
118118

119119
# ReleaseNotes of this module
120-
ReleaseNotes = '1.1.25
120+
ReleaseNotes = '1.1.26
121121
--------
122-
* Added new options to Get-NtSecurityDescriptor.
123-
* Updated accessible resource checking.
124-
* Added Remove-NtTokenPrivilege.
125-
* Added Session option to Get-NtToken.
126-
* Added command line option to Show-NtToken.
127-
* Added information classes for symbolic links.
122+
* Add DeviceGuid to Get/New-NtFile
123+
* Fixed bug in ETA registrations and added GUID enumeration.
124+
* Added SetExceptionPort to NtProcess.
125+
* Added child process mitigation improvements.
126+
* Added extended Fork.
127+
* Updated native process creation support.
128+
* Various new non-throwing methods.
129+
* Updated to C# 7.3.
130+
* Added list of access rights to NtType.
131+
* Added default mandatory policy to NtType.
132+
* Added SetDisposition methods to NtFile.
133+
* Added console and GUI support for Object ACEs.
134+
* Updated access checking to support Object Types.
135+
* Access check returns a structure rather than just an access mask.
136+
* CPP style NDR formatting (#21)
137+
* Added Get-NtTokenPrivilege command.
138+
* Added Get-NtLocallyUniqueId command.
128139
'
129140

130141
# External dependent modules of this module

‎NtObjectManager/Properties/AssemblyInfo.cs‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@
99
[assembly: AssemblyConfiguration("")]
1010
[assembly: AssemblyCompany("Google Inc.")]
1111
[assembly: AssemblyProduct("NtObjectManager")]
12-
[assembly: AssemblyCopyright("Copyright © Google Inc. 2016, 2017, 2018, 2019")]
12+
[assembly: AssemblyCopyright("Copyright © Google Inc. 2016-2020")]
1313
[assembly: AssemblyTrademark("")]
1414
[assembly: AssemblyCulture("")]
1515

@@ -32,5 +32,5 @@
3232
// by using the '*' as shown below:
3333
// [assembly: AssemblyVersion("1.0.*")]
3434
[assembly: AssemblyVersion("1.0.0.0")]
35-
[assembly: AssemblyFileVersion("1.1.25.0")]
36-
[assembly: AssemblyInformationalVersion("1.1.25")]
35+
[assembly: AssemblyFileVersion("1.1.26.0")]
36+
[assembly: AssemblyInformationalVersion("1.1.26")]

‎README.txt‎

Lines changed: 21 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
sandbox-attacksurface-analysis-tools
22

3-
(c) Google Inc. 2015, 2016, 2017, 2018, 2019
3+
(c) Google Inc. 2015, 2016, 2017, 2018, 2019, 2020
44
Developed by James Forshaw
55

66
This is a small suite of PowerShell tools to test various properties of sandboxes on Windows. Many of the
@@ -46,6 +46,26 @@ Thanks to the people who were willing to test it and give feedback:
4646

4747
Release Notes:
4848

49+
1.1.26
50+
--------
51+
* Add DeviceGuid to Get/New-NtFile
52+
* Fixed bug in ETA registrations and added GUID enumeration.
53+
* Added SetExceptionPort to NtProcess.
54+
* Added child process mitigation improvements.
55+
* Added extended Fork.
56+
* Updated native process creation support.
57+
* Various new non-throwing methods.
58+
* Updated to C# 7.3.
59+
* Added list of access rights to NtType.
60+
* Added default mandatory policy to NtType.
61+
* Added SetDisposition methods to NtFile.
62+
* Added console and GUI support for Object ACEs.
63+
* Updated access checking to support Object Types.
64+
* Access check returns a structure rather than just an access mask.
65+
* CPP style NDR formatting (#21)
66+
* Added Get-NtTokenPrivilege command.
67+
* Added Get-NtLocallyUniqueId command.
68+
4969
1.1.25
5070
--------
5171
* Added new options to Get-NtSecurityDescriptor.

0 commit comments

Comments
 (0)