2 ms·
Capslock sort of does this with go https://github.com/google/capslock https://github.com/google/capslock
by EE84M3i 1y ago
Capslock sort of does this with go https://github.com/google/capslock https://github.com/google/capslock
- tgv 1y agoInteresting. I hadn't seen it yet. I'll check out how fine-grained it really is. My first concern would (naturally) be network calls, but calling a local service should ideally is distinguishable from calling some address that does not originate in the top level.
- tgv 1y agoIf anyone ever check this thread: it works well. Use the json output, and it'll show the call path for each "capability" it detects (network, arbitrary code execution, ...). I use this on the output to organize it into a spreadsheet and scan quickly: jq -r '.capabilityInfo[] | [.capability, .depPath | split(" ") | reverse | join(" ")] | @tsv'