Infosecurity.US

Information Security & Occasional Forays Into Adjacent Realms

  • Web Log

New OpenSource .Net Security Tool Released

July 08, 2022 by Marc Handelman in Security Research, Security Tooling, .NET Foibles, Microsoft Cruft, D-Day June 6th 1944

Security news (received yesterday) engaged my inbuilt disdain for nearly all-things things Microsoft Corporation (NASDAQ: MSFT); post-disdain, and once I resumed a steady-state view of the world, I investigated further, and discovered OpenSource bits stored in a GITHUB repository owned & managed by Mandiant. The repository under scrutiny is mnemonically monikered - 'route-sisxty-sink'.

Folks, in a nutshell - the project has it's way with questionable .NET assemblies (aren't all .NET assemblies questionable?), or, in the words of the creators of this superb, expert-level ballet betwixt security & anti-cruft tooling 'Route Sixty-Sink, an open-source tool that enables defenders and security researchers alike to quickly identify vulnerabilities in any .NET assembly using automated source-to-sink analysis'.

Enjoy!

July 08, 2022 /Marc Handelman
Security Research, Security Tooling, .NET Foibles, Microsoft Cruft, D-Day June 6th 1944