mirror of
https://github.com/pe3zx/my-infosec-awesome.git
synced 2024-12-11 00:54:21 -05:00
Add google/sandbox-attacksurface-analysis-tools
This commit is contained in:
parent
382fec955f
commit
6884954db0
@ -541,6 +541,10 @@ My curated list of awesome links, resources and tools
|
|||||||
<td><a href="https://github.com/api0cradle/UltimateAppLockerByPassList">api0cradle/UltimateAppLockerByPassList</a></td>
|
<td><a href="https://github.com/api0cradle/UltimateAppLockerByPassList">api0cradle/UltimateAppLockerByPassList</a></td>
|
||||||
<td>The goal of this repository is to document the most common techniques to bypass AppLocker.</td>
|
<td>The goal of this repository is to document the most common techniques to bypass AppLocker.</td>
|
||||||
</tr>
|
</tr>
|
||||||
|
<tr>
|
||||||
|
<td><a href="https://github.com/google/sandbox-attacksurface-analysis-tools">google/sandbox-attacksurface-analysis-tools</a></td>
|
||||||
|
<td>This is a small suite of tools to test various properties of sandboxes on Windows. Many of the checking tools take a -p flag which is used to specify the PID of a sandboxed process. The tool will impersonate the token of that process and determine what access is allowed from that location. Also it's recommended to run these tools as an administrator or local system to ensure the system can be appropriately enumerated.</td>
|
||||||
|
</tr>
|
||||||
<tr>
|
<tr>
|
||||||
<td><a href="https://github.com/hlldz/Invoke-Phant0m">hlldz/Invoke-Phant0m</a></td>
|
<td><a href="https://github.com/hlldz/Invoke-Phant0m">hlldz/Invoke-Phant0m</a></td>
|
||||||
<td>Windows Event Log Killer</td>
|
<td>Windows Event Log Killer</td>
|
||||||
|
Loading…
Reference in New Issue
Block a user