DavidXanatos posts
Posts: 147
Files: 5
Sandboxie-Plus v0.5.4
Urgent security fixes (thanks @diversenok)Build 5.46.0 resolves many box isolation issues some of them critical that could allow rogue applications to escape the sandbox. It is highly advised to upgrade quickly to the new builds. For further details please review the change log below.If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.Download: https://github.com/sandboxie-plus/Sandboxie/releasesHotfix ChangelogAdded added "RunServiceAsSystem=..." allo...
Sandboxie-Plus v0.5.3
This is a maintenance release it brings some small new features and fixes many minor issues.The plus installer was improved it now provides a extract function and creates the required Sandboxie.ini and Sandboxie-plus.ini for portable operations.Download: https://github.com/sandboxie-plus/Sandboxie/releases/tag/v0.5.3bChangeLogAdded added prompt to choose if links in the sandman ui should be open in a sandboxed or unsandboxed browser added more recovery options, "recovery & ..." and more recver to options added "ClosedClsid=" to ...
Sandboxie-Plus 0.5.2
This is a maintenance release it does not bring any major new features but resolves a myriad of various bugs including a BSOD issue when "Core isolation" was enabled and a major compatibility bug with windows 10 build 2004 and later.It also brings a few minor +UI Improvements and an entirely new set of Icons.For Windows 7 unfortunately the signing process did not returned a working driver, a solution is being worked on.Therefor, for the time being please download the "Provisional Windows 7 Drivers.zip" package and provide the dr...
Sandboxi-Plus 0.5 (WHQL Certifyed)
This build is a major milestone in the development of Sandboxie, it marks the first open source release that has a driver properly signed for windows 10 and 8. For windows 7 unfortunately the signing process did not returned a working driver, a solution is being worked on.Therefor please NOTE that due to this the "for windows 7" installers include the old provisionally signed driver for the time being.If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build...
Sandboxie Plus v0.4.5
This build fixes many bugs and introduces a lot of new debugging facilities. Download: https://github.com/sandboxie-plus/Sandboxie/releases/tag/v0.4.5 ChangeLog Added added "Terminate all processes" and "disable forced programs" commands to tray menu in SandMan ui program start restrictions settings now can be switsched between a white list and a black list-- programs can be terminated and blacklisted from the context menu added additional process context menu options, lingering and leader process can be now set from menu add...
PrivateWin10 build v0.8.4 ready
This build brings many usability improvements and new functionality, like more detailed network access control, and rule cleanup options. This build also fixes many issues.Download:https://github.com/DavidXanatos/priv10/releases/tag/v0.84ChangelogAdded added duplicate rule cleanup option added support for loading modern app package icons added default service iconChanged refactored some helper functionsFixed improved verbose view sorting performance fixed issue prematurly closing the notification window fixed version numbering on service exe an...
Sandboxie-Plus v0.4.2
This build brings a great new feature, snapshots, these allow to save a box state. The file system changes are saved incrementally for every snapshot a folder named snapshot-n where n is the snapshot id will be created in the box folder. The snapshot layout as well as the information which one is the currently used one are saved in a snapshot.ini in the box folder. With this feature tracing what applications do will be even easier, as well as undoing destructive changes that may have occurred.Also with this release the SbiePlus build gets an ow...
PrivateWin10 v0.80 PreRelease
Finally a new build it features major internal rework in project structure for better maintainability and a reworked IPC mechanism for better performance. It also adds a powerful new feature "Control Presets" With those you can control groups of options (tweaks and firewall rules) from the tray or from its new preset page.For example you could create a preset "Windows Store" that would enable the windows store GPO, enable required the msft account service and allow the store app to access the internet.Or you could create a "...
Sandboxie-Plus v0.3
This is a huge update fixing many bugs and security issues, it also expands on the functionality of the new SandMan.exe UI component, Check out the full ChangeLog for more details.Changelog:Added API_QUERY_PROCESS_INFO can be now used to get the original process token of sandboxed processes -- Note: this capability is used by TaskExplorer to allow inspecting sandbox internal tokens Added option "KeepTokenIntegrity=y" to make the sbie token keep its initial integrity level (debug option) -- Note: Do NOT USE Debug Options if you dont know...
TaskExplorer v1.2.8
This build focuses on usability improvements and bug fixes. It solves an issue causing very high CPU usage introduced in the last build. And it introduces some mitigation to the issues caused by the driver not being signed properly.ChangeLogAdded "Original Token" button to inspect the original process token of sandboxed processes -- SbieDrv driver 5.42 or higher required added command line option to start multiple instances added driver file obfuscation and driver installation dialogChanged reorganized settings pages improved sandboxie ...
Task Explorer v1.2.1
This build comes with many big fixes and minor usability improvements.Download: https://github.com/taskexplorer/TaskExplorer/releases/tag/v1.2.1[1.2.1] - 2020-04-27Added the TCP/IP traffic graph now show additional plots with LAN traffic based on ETW data services can now be stoped from the process tree contect menuChanged statis column now sorts not alphabetically but by list color reorganized the tool bar a bit and added a few shortcuts switched back to the custom installer due to "compatybility" issuesFixed cpu affinity was not pr...
Sandboxie is now OpenSource
Sandboxie is sandbox-based isolation software for 32- and 64-bit Windows NT-based operating systems. An isolated virtual environment allows controlled testing of untrusted programs and web surfing.The current owner Sophos has released this great peace of software into the Community under the GPL-v3 License.Lets keep it alive and kicking!!!My first build: https://github.com/DavidXanatos/Sandboxie/releases/tag/v5.40.1 solving the "The Windows Installer Service could not be accessed." issue present on windows 1903 and later.
Private Win10 Build 0.75
(OP) New build improves on handling of changed firewall rules, now rule changes gets notified together with new connection attempts and the UI allows for swiftly granting or reverting of changed/new Windows Firewall rules created by 3rd party applications. Download: https://github.com/DavidXanatos/priv10/releases/tag/v0.75 [0.75] - 2020-02-18 Added when a firewall rule gets changed a new notification pupup gets displayed notification window has now tabs -- added tab with rule changed notifications notification window can now be opened/closed ...
DiskCryptor 1.2 Beta 1, a fork of DC with UEFI/GPT boot support
Here is the first new build of DiskCryptor since 2014 its a fork of the project and starting with version 1.2 It comes with a UEFI compatible boot-loader and various fixes to make it work with EFI installations on GPT disks. The boot loader is not signed for secure boot, so for now, to use it, disabling secure boot is required. The tool is able to use a signed shim Bootloader from Red Hat and install it, however for now the required files are not included in the installation package, as its a more fiddly installation and given the r...
Task Explorer build v1.1
This build focuses on greatly improving the tracking of process starts and display of meaningful process trees. This is accomplished by monitoring the appropriate ETW events and using this information to list short lived processes that otherwise would fall between the refresh intervals of the regular enumeration method. A new setting "Retain parent Processes" makes task explorer keep terminated processes listed as long as there are still child or (grand,...)grandchild processes running. A new toolbar button allows to quickly switch betw...
Private Win10 build 0.70
New Update with new features, the improved DNS inspector now not only logs all domains a process contacts it also logs the amount of data send/received and connection count.Download: https://github.com/DavidXanatos/priv10/releases/tag/v0.70 [0.70] - 2019-12-14 Added improved the DNS Inspector added uplpad/download per domain added listing of unresolved IP's added udp endpoint logging added proces monitor using ETW events to capture paths of processes that terminate quickly added missing localization to all the new UI elements added to...
New Test Build of PrivateWin10
New build with many improvements and changes, its not thoroughly tested hence marked as prerelease.Download: https://github.com/DavidXanatos/priv10/releases/tag/v0.57 [0.57] - 2019-11-16 Added a few new tweaks added windows 8 and newer address keywords added app context menu option to uninstall the client (remove service, autorun, event log) added -help command to show all available console commandsChanged on windows 8 and above the "Internet" address keyword is used for rules, instead of a manually assembled range rule lookup now prope...
New improved build ov PrivateWin10
New release: https://github.com/DavidXanatos/priv10/releases/tag/v0.55New build with many improvements, see change-log for details.[0.51] - 2019-11-10Added added tweaks to disable visual studio telemetry when closing priv10 from tray now it prompts if the user wants to stop the priv10 service programs.xml and tweaks.xml is now auto saved every 15 minutes added rule context menu added command to restore rules detected as changed added command to approve rules detected as changed program list cleanup not removed not longer existing programs added...
TaskExplorer Maintenance release
Maintenance Release with some bug fixes, see change-log.https://github.com/DavidXanatos/TaskExplorer/releases/tag/v1.0.1Changed improved file handle info retrival ewt monitoring button is now disabled when running without admin rightsFixed memory leak occuring when updating per process handle list fixed issue with service to process association
New build of Private Win10 v0.50a
Finally I finished the new build: https://github.com/DavidXanatos/priv10/releases/tag/v0.50aA large parts of the code base have been reworked to solve some more fundamental issues of windows firewall handling, hance it took so long.Most issues have been fixed and the usability greatly improved. Also many new features have been added, priv10 now shows in addition to the firewall log also a list of all open sockets with data rates. The tool is also capable of showing the remote host names for remote IP's wherever possible it shows the domains...
PrivateWin10 development progress
Why PrivateWin10 development stalled for so long and what’s coming. I know lots of people are waiting on a new Priv10 release, and don’t worry one is in the workings. But since so many months have passed since the last release I feel like some explanation is in order.First the obvious one TaskExplorer (https://github.com/DavidXanatos/TaskExplorer) this project took a lot of my spare time away from other projects, but for me it had priority.Now to the more Priv10 related reasons for the long delay; windows firewall is a huge pain to deal wit...
PrivateWin10 UI
I'm currently re working the entire PrivateWin10 codebase and wanted to inquire how do you like the current UI concept? And or what would you think about a more classical UI like in my other project task explorer: https://github.com/DavidXanatos/TaskExplorer ? I would appropriate any feedback very much.
Task Explorer Build 0.9.25
New release: https://github.com/DavidXanatos/TaskExplorer/releases/tag/v0.9.25This releases added many small convenience features, as well as a few major once.It now has a DNS cache tab, and the date form the DNS cache are used to more reliably resolve the remote host mane to which a socket was opened. Instead of just using a reverse dns which in the age of CDN's, likecloud flare and blazing fast, is quite useless, the tool correlates new sockets with the system DNS cache this way resolving which host name the process actually requested.Tas...
New Task Explorer release
Most recent build, as of today: https://github.com/DavidXanatos/TaskExplorer/releases/tag/v0.8.5[0.8.5] - 2019-09-01This release focuses on bug fixing and usability improvements. An other major change is the use of the own xprocesshacker.sys driver by default, this is required as the original kprocesshacker.sys comes with a DRM that locks some functionality away from tools which are not signed by the process hacker team. With an own driver we can again mess with protected processes and read any memory location.The used leaked signing certificat...
New tool TaskExplorer
Hi all, In started yet another public project TaskExplorer: https://github.com/DavidXanatos/TaskExplorerThe idea behind it is to have a platform independent Qt5 based UI and different backbends one for Windows and one for Linux.For windows it will be using the ProcessHacker library https://github.com/processhacker/processhacker and for now that will be the main target platform.The UI layout is inspired by an old tool called TaskInfo, IMHO its far Superior to any other task manager, but since its closed source and was abandoned in 2012 we need a...
First imporessions on Windows 1903
I was testing private win10 with windows 1903 and MSFT seam to try to patronize users even more in this build. The windows defender can not longer be disabled using the GPO'sThey have added a temper protection feature that overwrites GPO's and needs to be disabled manually in the defender UI, it changes the reg value:[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Features]"TamperProtection" = dword:00000000The key is protected as a 3rd party tool can not modify it even when running as TrustedInstallerI'm looking int...
New Tool - UltraTTS
If you are into TTS you surly know BalaBolka, it a advanced TTS tool to create audio-books, using SAPI Voices. It can also read text from clipboard as well as install a global hot key to issue a Ctrl+C and than read whatever ended up in the clipboard. While it excels in its job as a audio-book maker, it is lacking features as a TTS Reader. Unfortunately the tool, while being free, is not open source so improving on its TTS Reader qualities is not possible. But what is possible is to create an own Open Source GPLv3 tool which would excel in just...
