Crate firehazard

Expand description

§🔥 firehazard 🔥

Create a fire hazard by locking down your (Microsoft) Windows so nobody can escape (your security sandbox.)
Unopinionated low level API bindings focused on soundness, safety, and stronger types over raw FFI.
You may be at hazard of being fired (or worse) for relying on this crate for security:

§⚠️ Warnings ⚠️

0.0.0-yyyy-mm-dd doesn’t follow semver.
I’m not subscribed to any security lists.
I don’t have anything alerting me to CVEs.
This crate is probably not 100% sound. Bug reports welcome.
I don’t have any PGP keys for you to securely send me security bugs.
Keep flammable materials away from heaters and other ignition sources.
This isn’t backed by a team or company. Nor me, frankly.
I have no code reviewers.
I haven’t fuzz tested anything.
My test coverage is mediocre.
There is no red team.
I haven’t made a proper attempt to bypass even the example sandbox.
Just because you’re paranoid, doesn’t mean that they aren’t out to get you.
Rust has made me overconfident.
Rust has made you overconfident.
Keep emergency exits accessible and usable to avoid fire safety hazards.
The false sense of security - that using this code will lure you into - may be worse than nothing at all.
Test your fire alarms. The batteries are probably dead.

§Quickstart

## Cargo.toml
[dependencies]
firehazard.git = "https://github.com/MaulingMonkey/firehazard"

License

Licensed under either of

Apache License, Version 2.0 (LICENSE-APACHE or http://www.apache.org/licenses/LICENSE-2.0)
MIT license (LICENSE-MIT or http://opensource.org/licenses/MIT)

at your option.

Contribution

Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.

Modules§

access: [docs.microsoft.com] ACCESS_MASK generic types, functions, and constants
ace: [docs.microsoft.com] ACL / ACE_HEADER related types and manipulation functions
acl: [docs.microsoft.com] ACL related types and manipulation functions
alloc: Allocators, deallocators, etc.
debug: Debugger APIs from debugapi.h, ~~dbgeng.h~~ (not yet)
desktop: [docs.microsoft.com] Desktop APIs
handle: [docs.microsoft.com] Generic Kernel Object HANDLE wrapping types and functions.
io: I/O APIs (pipe handles and fns)
job: [docs.microsoft.com] Job Object types and fns
policy: [docs.microsoft.com] Process mitigation policy types and functions
privilege: [docs.microsoft.com] Privilege related types and functions
process: [docs.microsoft.com] Process OwnedHandle and related fns
security: [docs.microsoft.com] Attributes, Descriptor, DescriptorBuilder, etc.
sid: [docs.microsoft.com] SID related types and manipulation functions
thread: [docs.microsoft.com] Thread OwnedHandle and related fns
token: [docs.microsoft.com] Access token handle types and related functions
winsta: [docs.microsoft.com] Window Station APIs

Macros§

sid: Create a sid::Ptr at compile time via e.g. sid!(S-1-0-0)

Structs§

Error: [docs.microsoft.com] DWORD/u32, typically from GetLastError, representing an error code, hresult, or ntstatus
Luid: [docs.microsoft.com] LUID (~ a 32-bit aligned u64 / “Locally Unique IDentifier”)

Functions§

adjust_token_privileges_disable_if: [docs.microsoft.com] AdjustTokenPrivileges(self, FALSE, ...)
Disable the specified privileges of the token.
Disabled privileges can be re-enabled - this guards against accidents, not malware!
adjust_token_privileges_enable_if: [docs.microsoft.com] AdjustTokenPrivileges(self, FALSE, ...)
Enable only the specified privileges of the token.
Disabled privileges can be re-enabled - this guards against accidents, not malware!
adjust_token_privileges_remove_if: [docs.microsoft.com] AdjustTokenPrivileges(self, FALSE, ...)
Remove the specified privileges of the token.
Discarded privileges cannot be reapplied.
adjust_token_privileges_retain_if: [docs.microsoft.com] AdjustTokenPrivileges(self, FALSE, ...)
Keep only the specified privileges of the token.
Discarded privileges cannot be reapplied.
check_remote_debugger_present: [docs.microsoft.com] CheckRemoteDebuggerPresent
continue_debug_event: [docs.microsoft.com] ContinueDebugEvent
convert_sid_to_string_sid_a: [docs.microsoft.com] ConvertSidToStringSidA
convert_sid_to_string_sid_w: [docs.microsoft.com] ConvertSidToStringSidW
convert_string_sid_to_sid_a: [docs.microsoft.com] ConvertStringSidToSidA - convert e.g. "S-1-0-0" to sid::Box
convert_string_sid_to_sid_w: [docs.microsoft.com] ConvertStringSidToSidW - convert e.g. "S-1-0-0" to sid::Box
debug_active_process: [docs.microsoft.com] DebugActiveProcess
debug_active_process_stop: [docs.microsoft.com] DebugActiveProcessStop
debug_break: [docs.microsoft.com] DebugBreak
is_debugger_present: [docs.microsoft.com] IsDebuggerPresent
lookup_privilege_name_a: [docs.microsoft.com] LookupPrivilegeNameA
lookup_privilege_value_a: [docs.microsoft.com] LookupPrivilegeValueA
output_debug_string_a: [docs.microsoft.com] OutputDebugStringA
output_debug_string_w: [docs.microsoft.com] OutputDebugStringW
read_process_memory^⚠: [docs.microsoft.com] ReadProcessMemory
sleep_ms: [docs.microsoft.com] Sleep
sleep_ms_ex: [docs.microsoft.com] SleepEx
wait_for_debug_event: [docs.microsoft.com] WaitForDebugEvent
wait_for_debug_event_ex: [docs.microsoft.com] WaitForDebugEventEx

Crate firehazardCopy item path