AccessMask is a command line tool that interprets handle access mask values (both generic and specific).
It is directly taken from the awesome tools from the one and only (the GOAT) Pavel Yosifovich.
This project is more or less a one-to-one rust translation of his tools but rust powered.
My primary goal is to learn more about windows internals by reading God Pavel's code, and then to make it available through cargo install
.
Usage: access-mask.exe [OPTIONS] <VALUE>
Arguments:
<VALUE> value is interpreted as hexadecimal, unless the -d switch is specified. Specific access mask bits will not be interpreted if type is not specified
Options:
-d, --decimal interpret value as a decimal value
-t, --type <TYPE> Specify a type for the access mask [possible values: process, thread, event, mutex, mutant, semaphore, timer, desktop, windows-station, winsta, key, token, job, file, directory, alpc, port, active-directory]
-h, --help Print help
-V, --version Print version