Skip to content

Commit

Permalink
Update readme
Browse files Browse the repository at this point in the history
  • Loading branch information
diversenok committed Aug 27, 2020
1 parent 01ba52c commit 6e92fba
Showing 1 changed file with 12 additions and 4 deletions.
16 changes: 12 additions & 4 deletions Readme.md
Original file line number Diff line number Diff line change
@@ -1,8 +1,16 @@
# Things-AppContainer-Knows

My collection of tricks that allow a program to retrieve peculiar details about the system even from a restricted environment of a low-privileged AppContainer.
Here is my collection of tricks that allow a program to retrieve peculiar details about the system even from a restricted environment of a low-privileged AppContainer.

### Features
- Enumeration of processes (PID, image name, image file location)
- Enumeration of threads (TID, per process)
- Enumeration of loaded modules (file name, per process, might be incomplete)
- [x] Listing all processes (PID, image name, file location)
- [ ] Listing all threads per-process (TID only)
- [ ] Listing loaded modules per-process (filename, sometimes base address, might be incomplete)
- [ ] Listing services within each svchost process

See the [releases](https://github.com/diversenok/Things-AppContainer-Knows/releases) page to experiment with it yourself.

### Screenshots
Here you can see a complete list of processes on the system from a low-privileged AppContainer sandbox.

![](https://user-images.githubusercontent.com/30962924/91461377-31aff480-e889-11ea-87b9-7907651da219.png)

0 comments on commit 6e92fba

Please sign in to comment.