Skip to content

Commit

Permalink
Prepare for 0.3 release
Browse files Browse the repository at this point in the history
  • Loading branch information
diversenok committed Mar 25, 2023
1 parent 3863bc0 commit f813eab
Show file tree
Hide file tree
Showing 2 changed files with 26 additions and 8 deletions.
32 changes: 25 additions & 7 deletions Readme.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# Token Universe

**Token Universe** is an advanced tool for experimenting and researching **Windows security mechanisms**. It exposes UI for creating, viewing, impersonating, and modifying access tokens, spawning processes, managing Local Security Authority, and more. The program can operate and (at least partially) provide valuable functionality under a wide range of privileges, from *LPAC AppContainer* sandbox to SYSTEM with *SeTcbPrivilege* and *SeCreateTokenPrivilege*.
**Token Universe** is an advanced tool for experimenting and researching **Windows security mechanisms**. It exposes UI for creating, viewing, impersonating, and modifying access tokens, spawning processes, managing Local Security Authority, checking available access to many types of objects, and more. The program can operate and (at least partially) provide valuable functionality under a wide range of privileges, from *LPAC AppContainer* sandbox to SYSTEM with *SeTcbPrivilege* and *SeCreateTokenPrivilege*.

## Downloads

Expand All @@ -13,8 +13,8 @@ For instructions on how to compile the project, see [a section below](#compiling
Key | Value
------------- | -----
Author | diversenok
Version | 0.2
Date | July 24, 2022
Version | 0.3
Date | March 25th, 2023
Compiled with | Embarcadero Delphi 10.4

# Features
Expand All @@ -29,7 +29,7 @@ Compiled with | Embarcadero Delphi 10.4

### Example: Logon

![Logon Window](https://user-images.githubusercontent.com/30962924/180661347-4a20b391-605f-4ba1-9538-0a8959903fd5.PNG)
![Logon Window](https://user-images.githubusercontent.com/30962924/227736765-6d25b466-df8e-4606-ad17-de8864c50652.png)

### Example: Creation

Expand All @@ -39,6 +39,10 @@ Compiled with | Embarcadero Delphi 10.4

![Run Window](https://user-images.githubusercontent.com/30962924/180661363-c4210fd9-ef39-4d9d-a8ed-844a5f7bab39.PNG)

## Checking Access

![Access Check Window](https://user-images.githubusercontent.com/30962924/227734301-782086c6-aad0-4e67-ac83-32e574dd3ed1.png)

## Other

![Other](https://user-images.githubusercontent.com/30962924/180661365-e2a5c35a-3024-4812-b728-e3e364f2dd2f.PNG)
Expand Down Expand Up @@ -143,7 +147,7 @@ There are a lot of already implemented features, but there are also many more to
- [ ] Group information
- [ ] Alias information
- [ ] User information
- [ ] Enumerate domain groups/aliases/users
- [x] Enumerate domain groups/aliases/users
- [ ] Enumerate group members
- [ ] Enumerate alias members
- [ ] Manage group members
Expand Down Expand Up @@ -181,21 +185,36 @@ There are a lot of already implemented features, but there are also many more to
- [x] Parent process override
- [ ] Mitigation policies
- [x] Child process policy
- [x] Process protection (PPL/Full/etc.)
- [x] Custom SxS registration
- [ ] Job assignment
- [x] Run as invoker/ignore elevation
- [x] AppContainer SID
- [ ] Capabilities
- [ ] Security descriptor
- [x] Verify access to desktop/window station

### Process & thread list
- [x] Hierarchy
- [x] Icons
- [ ] Listing processes from Low integrity & AppContainer
- [ ] Basic actions (resume/suspend, ...)
- [x] Suspend/resume support
- [ ] Customizable columns
- [ ] Highlighting
- [ ] Security

### Attack Surface Analysis
- [x] Checking access to NT namespace objects
- [x] Namespace object name suggestions
- [x] Checking access to processes/threads/tokens
- [x] Checking access to LSA and SAM accounts
- [ ] Checking access to window stations and desktops
- [ ] Checking access to services and SCM
- [ ] Checking access to file shares
- [ ] Checking access to kernel transactions
- [ ] Checking access to objects in private namespaces
- [ ] Enumerating accessible resources

### Other
- [x] Restarting as admin
- [x] Restarting as SYSTEM
Expand All @@ -207,7 +226,6 @@ There are a lot of already implemented features, but there are also many more to
- [x] Auto-detecting inherited handles
- [x] SID suggestions
- [x] Detailed error status information
- [ ] Dialog for testing access to objects
- [ ] DLL mode

# Compiling
Expand Down
2 changes: 1 addition & 1 deletion TokenUniverse.dproj
Original file line number Diff line number Diff line change
Expand Up @@ -60,7 +60,7 @@
<PropertyGroup Condition="'$(Base)'!=''">
<DCC_TypedAtParameter>true</DCC_TypedAtParameter>
<Manifest_File>$(BDS)\bin\default_app.manifest</Manifest_File>
<VerInfo_Keys>CompanyName=diversenok;FileDescription=An advanced tool for working with access tokens;FileVersion=0.2.0.4;InternalName=;LegalCopyright=;LegalTrademarks=;OriginalFilename=;ProductName=;ProductVersion=0.2.0.4;Comments=https://github.com/diversenok/TokenUniverse</VerInfo_Keys>
<VerInfo_Keys>CompanyName=diversenok;FileDescription=An advanced tool for working with access tokens;FileVersion=0.3.0.0;InternalName=;LegalCopyright=;LegalTrademarks=;OriginalFilename=;ProductName=;ProductVersion=0.3.0.0;Comments=https://github.com/diversenok/TokenUniverse</VerInfo_Keys>
<VerInfo_Locale>1033</VerInfo_Locale>
<Icon_MainIcon>$(BDS)\bin\delphi_PROJECTICON.ico</Icon_MainIcon>
<DCC_Namespace>System;Xml;Data;Datasnap;Web;Soap;Vcl;Vcl.Imaging;Vcl.Touch;Vcl.Samples;Vcl.Shell;$(DCC_Namespace)</DCC_Namespace>
Expand Down

0 comments on commit f813eab

Please sign in to comment.