Last Updated: October 15, 2003
AccessEnum v1.1
This simple yet powerful security tool shows you who has what access to directories, files and Registry keys on your systems. Use it to find holes in your permissions.
This simple yet powerful security tool shows you who has what access to directories, files and Registry keys on your systems. Use it to find holes in your permissions.
CacheSet v1.0
CacheSet is a program that allows you to control the Cache Manager's working set size using functions provided by NT. Its compatible with all versions of NT and full source code is provided.
CacheSet is a program that allows you to control the Cache Manager's working set size using functions provided by NT. Its compatible with all versions of NT and full source code is provided.
Ctrl2cap v2.0
This is a kernel-mode driver that demonstrates keyboard input filtering just above the keyboard class driver in order to turn caps-locks into control keys. Filtering at this level allows conversion and hiding of keys before NT even "sees" them. Full source is included. Ctrl2cap also shows how to use NtDisplayString() to print messages to the initialization blue-screen.
This is a kernel-mode driver that demonstrates keyboard input filtering just above the keyboard class driver in order to turn caps-locks into control keys. Filtering at this level allows conversion and hiding of keys before NT even "sees" them. Full source is included. Ctrl2cap also shows how to use NtDisplayString() to print messages to the initialization blue-screen.
Device Object Security
Are your device objects as secure as they should be? Learn what permissions are applied to the objects you create with IoCreateDevice and get introduced to kernel-mode security APIs that can be used to close potential device object security holes.
Are your device objects as secure as they should be? Learn what permissions are applied to the objects you create with IoCreateDevice and get introduced to kernel-mode security APIs that can be used to close potential device object security holes.
Formatx and Chkdskx v1.0
Complete source code for chkdsk and format clone programs. These examples demonstrate the use of file system utility functions that you can incorporate into your own applications.
Complete source code for chkdsk and format clone programs. These examples demonstrate the use of file system utility functions that you can incorporate into your own applications.
Fundelete v2.0
This utility expands the NT 4.0 Recycle Bin to catch file deleted from command prompts and within programs, and it comes with full source code. Several powerful device driver techniques, including getting a user's SID within a driver, enumerating a directory's contents, and generating IRPs, are demonstrated in source code available for download.
This utility expands the NT 4.0 Recycle Bin to catch file deleted from command prompts and within programs, and it comes with full source code. Several powerful device driver techniques, including getting a user's SID within a driver, enumerating a directory's contents, and generating IRPs, are demonstrated in source code available for download.
Inside Disk Defragmenting
Find out about the APIs Windows NT Defragmentation products use, and download a free defragmenting demonstration program, complete with full source.
Find out about the APIs Windows NT Defragmentation products use, and download a free defragmenting demonstration program, complete with full source.
Inside the Disk Key
The HKLM\System\Disk\Information value is the heart of NT's disk administration. It contains information on drive mappings and fault tolerant configurations. In this article I go inside the Disk\Information value to describe its format, and provide source code to a program, Diskkey, that reads and decodes it.
The HKLM\System\Disk\Information value is the heart of NT's disk administration. It contains information on drive mappings and fault tolerant configurations. In this article I go inside the Disk\Information value to describe its format, and provide source code to a program, Diskkey, that reads and decodes it.
Miscellaneous
Source code to a few miscellaneous applets, like a LoggedOn, a logon session enumerator.
Source code to a few miscellaneous applets, like a LoggedOn, a logon session enumerator.
NewSID v4.03
Learn about the computer SID problem everybody has been talking about and get a free computer SID changer, SID, complete with full source code.
Learn about the computer SID problem everybody has been talking about and get a free computer SID changer, SID, complete with full source code.
NTFSInfo v1.0
Use NTFSInfo to see detailed information about NTFS volumes, including the size and location of the Master File Table (MFT) and MFT-zone, as well as the sizes of the NTFS meta-data files.
Use NTFSInfo to see detailed information about NTFS volumes, including the size and location of the Master File Table (MFT) and MFT-zone, as well as the sizes of the NTFS meta-data files.
SDelete v1.2
Securely overwrite your sensitive files and cleanse your free space of previously deleted files using this DoD-compliant secure delete program. Complete source code is included.
Securely overwrite your sensitive files and cleanse your free space of previously deleted files using this DoD-compliant secure delete program. Complete source code is included.
ShareEnum v1.51
Scan file shares on your network and view their security settings to close security holes.
Scan file shares on your network and view their security settings to close security holes.
TCPView v2.34
See all open TCP and UDP endpoints. Full source to the command-line version of this tool, netstatp, is included.
See all open TCP and UDP endpoints. Full source to the command-line version of this tool, netstatp, is included.
Tokenmon v1.01
Watch security-related activity, including logon, logoff, privilege usage, and impersonation with this monitoring tool.
Watch security-related activity, including logon, logoff, privilege usage, and impersonation with this monitoring tool.