XaiJu
DavidXanatos

DavidXanatos

patreon


DavidXanatos posts

Sandboxie-Plus v0.5.4

Urgent security fixes (thanks @diversenok)

Build 5.46.0 resolves many box isolation issues some of them critical  that could allow rogue applications to escape the sandbox. It is highly  advised to upgrade quickly to the new builds. For further details  please review the change log below.

If you have issues with an update installation, just unins...

View Post

Sandboxie-Plus v0.5.3

This is a maintenance release it brings some small new features and fixes many minor issues.

The plus installer was improved it now provides a extract function  and creates the required Sandboxie.ini and Sandboxie-plus.ini for  portable operations.

Download: https://github.com/sandboxie-plus/Sandboxie/releases/tag/v0.5.3b

ChangeLog

Adde...

View Post

Sandboxie-Plus 0.5.2

This is a maintenance release it does not bring any major new  features but resolves a myriad of various bugs including a BSOD issue  when "Core isolation" was enabled and a major compatibility bug with  windows 10 build 2004 and later.
It also brings a few minor +UI Improvements and an entirely new set of Icons.

For Windows 7 unfortunately the signing process did not returned a working driver, a solution is being worked on.
Therefor, for the time b...

View Post

Sandboxi-Plus 0.5 (WHQL Certifyed)

This build is a major milestone in the development of Sandboxie,  it marks the first open source release that has a driver properly signed  for windows 10 and 8.

For windows 7 unfortunately the signing process did not returned a working driver, a solution is being worked on.
Therefor please NOTE that due to t...

View Post

Sandboxie Plus v0.4.5

This build fixes many bugs and introduces a lot of new debugging facilities.

Download: https://github.com/sandboxie-plus/Sandboxie/releases/tag/v0.4.5

ChangeLog

Added

  • added "Terminate all processes" and "disable forced programs" commands to tray menu in SandMan ui
  • program start restrictions se...

    View Post

PrivateWin10 build v0.8.4 ready

This  build brings many usability improvements and new functionality, like  more detailed network access control, and rule cleanup options. This  build also fixes many issues.

Download:https://github.com/DavidXanatos/priv10/releases/tag/v0.84

Changelog

Added

  • added duplicate rule cleanup option
  • View Post

Sandboxie-Plus v0.4.2

This build brings a great new feature, snapshots, these allow to  save a box state. The file system changes are saved incrementally for  every snapshot a folder named snapshot-n where n is the snapshot id will  be created in the box folder. The snapshot layout as well as the  information which one is the currently used one are saved in a  snapshot.ini in the box folder. With this feature tracing what  applications do will be even easier, as well as undoing destru...

View Post

PrivateWin10 v0.80 PreRelease

Finally  a new build it features major internal rework in project structure for  better maintainability and a reworked IPC mechanism for better  performance. It also adds a powerful new feature "Control Presets" With  those you can control groups of options (tweaks and firewall rules) from  the tray or from its new preset page.
For  example you could create a preset "Windows Store" that would enable the  windows store GPO, enable required the msft account...

View Post

Sandboxie-Plus v0.3

This is a huge update fixing many bugs and security issues, it  also expands on the functionality of the new SandMan.exe UI component,  Check out the full ChangeLog for more details.


Changelog:

Added


  • API_QUERY_PROCESS_INFO can be now used to get the original process token of sandboxed processes
    -- Note: this capability is used by TaskExplorer to allow inspecting sandbox internal tokens
  • Added option "KeepTokenIntegrity=y"...

    View Post

TaskExplorer v1.2.8

This build focuses on usability improvements and bug fixes. It  solves an issue causing very high CPU usage introduced in the last  build. And it introduces some mitigation to the issues caused by the  driver not being signed properly.


ChangeLog

Added


  • "Original Token" button to inspect the original process token of sandboxed processes
    -- SbieDrv driver 5.42 or higher required
  • added command line option to start multi...

    View Post

Task Explorer v1.2.1

This build comes with many big fixes and minor usability improvements.
 

Download: https://github.com/taskexplorer/TaskExplorer/releases/tag/v1.2.1
 

[1.2.1] - 2020-04-27
 

Added
 

  • the TCP/IP traffic graph now show additional plots with LAN traffic based on ETW data
  • services can now be...

    View Post

Sandboxie is now OpenSource

Sandboxie is sandbox-based isolation software for 32- and 64-bit  Windows NT-based operating systems.  An isolated virtual  environment allows controlled testing of untrusted programs and web  surfing.

The current owner Sophos has released this great peace of software into the Community under the GPL-v3 License.


Lets keep it alive and kicking!!!


My first build: View Post

Private Win10 Build 0.75

    (OP)    

New build improves on handling of changed firewall rules, now rule  changes gets notified together with new connection attempts and the UI  allows for swiftly granting or reverting of changed/new Windows Firewall  rules ...

View Post

DiskCryptor 1.2 Beta 1, a fork of DC with UEFI/GPT boot support

       

Here is the first new build of DiskCryptor since 2014 its a fork of the project and starting with version 1.2
It comes with a UEFI compatible boot-loader and various fixes to make it work with EFI installations on GPT disks.

The boot loader is not signed for secure boot, so for now, to use it, disabling secure boot is required.
The tool is able to use a signed shim Bootloader from Red Hat and  install i...

View Post

Task Explorer build v1.1

 This build focuses on greatly improving the tracking of process starts  and display of meaningful process trees. This is accomplished by  monitoring the appropriate ETW events and using this information to list  short lived processes that otherwise would fall between the refresh  intervals of the regular enumeration method.
A new setting "Retain parent Processes" makes task explorer keep  terminated processes listed as long as there are still child or  ...

View Post

Private Win10 build 0.70

New Update with new features, the improved DNS inspector now not  only logs all domains a process contacts it also logs the amount of data  send/received and connection count.


Download: https://github.com/DavidXanatos/priv10/releases/tag/v0.70

[0.70] - 2019-12-14 Added 

  • improved the DNS Inspector 
    • adde...

      View Post

New Test Build of PrivateWin10

New build with many improvements and changes, its not thoroughly tested hence marked as prerelease.Download: https://github.com/DavidXanatos/priv10/releases/tag/v0.57

[0.57] - 2019-11-16 Added 

  • a few new tweaks
  • added windows 8 and newer address keywords
  • added app context menu option to uninstall the client (remove servic...

    View Post

New improved build ov PrivateWin10

 New release: https://github.com/DavidXanatos/priv10/releases/tag/v0.55New build with many improvements, see change-log for details.
[0.51] - 2019-11-10Added 

  • added tweaks to disable visual studio telemetry
  • when closing priv10 from tray now it prompts if the user wants to stop the priv10 service
  • programs.xml and tweaks.xml is now auto sa...

    View Post

TaskExplorer Maintenance release

 Maintenance Release with some bug fixes, see change-log.https://github.com/DavidXanatos/TaskExplorer/releases/tag/v1.0.1
Changed 

  •     improved file handle info retrival
  •     ewt monitoring button is now disabled when running without admin rights

Fixed 

  •     memory l...

    View Post

New build of Private Win10 v0.50a

 Finally I finished the new build: https://github.com/DavidXanatos/priv10/releases/tag/v0.50a


A large parts of the code base have been reworked to solve some more fundamental issues of windows firewall handling, hance it took so long.

Most  issues have been fixed and the usability greatly improved. Also many  new features have been added, priv10 now shows in additi...

View Post

PrivateWin10 development progress

Why PrivateWin10 development stalled for so long and what’s coming. I  know lots of people are waiting on a new Priv10 release, and don’t worry  one is in the workings. But since so many months have passed since the  last release I feel like some explanation is in order.
 

First the obvious one TaskExplorer (https://github.com/DavidXanatos/TaskExplorer) this project took a lot...

View Post

PrivateWin10 UI

       

I'm currently re working the entire PrivateWin10 codebase and wanted to inquire how do you like the current UI concept?
And or what would you think about a more classical UI like in my other project task explorer: https://github.com/DavidXanatos/TaskExplorer
?
I would appropriate any feedb...

View Post

Task Explorer Build 0.9.25

New release: https://github.com/DavidXanatos/TaskExplorer/releases/tag/v0.9.25


This releases added many small convenience features, as well as a few major once.It  now has a DNS cache tab, and the date form the DNS cache are used to  more reliably resolve the remote host mane to which a socket was opened.  Instead of just using a reverse dns which in the age of CD...

View Post

New Task Explorer release

 Most recent build, as of today: https://github.com/DavidXanatos/TaskExplorer/releases/tag/v0.8.5
 

[0.8.5] - 2019-09-01
 

This release focuses on bug fixing and usability improvements. An other  major change is the use of the own xprocesshacker.sys driver by default,  this is required as the original kprocesshacker.sys comes with...

View Post

New tool TaskExplorer

 Hi all, In started yet another public project TaskExplorer: https://github.com/DavidXanatos/TaskExplorer

The idea behind it is to have a platform independent Qt5 based UI and different backbends one for Windows and one for Linux.

For windows it will be using the ProcessHacker library https://github.com/process...

View Post

First imporessions on Windows 1903

I was testing private win10 with windows 1903 and MSFT seam to try to patronize users even more in this build. The windows defender can not longer be disabled using the GPO's

They have added a temper protection feature that overwrites GPO's and needs to be disabled manually in the defender UI, it changes the reg value:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Features]

"TamperProtection" = dword:00000000

The key is protected as a 3rd party tool can not m...

View Post

New Tool - UltraTTS

If you are into TTS you surly know BalaBolka, it a advanced TTS tool to create audio-books, using SAPI Voices. It can also read text from clipboard as well as install a global hot key to issue a Ctrl+C and than read whatever ended up in the clipboard. While it excels in its job as a audio-book maker, it is lacking features as a TTS Reader. Unfortunately the tool, while being free, is not open source so improving on its  TTS Reader qualities is not possible. But what is possible is to cre...

View Post