├── .gitattributes
├── DynamicFinder
├── Proc.fs
├── DynamicFinder.fsproj
├── Program.fs
└── Dll.fs
├── DynamicFinder.sln
├── README.md
└── .gitignore
/.gitattributes:
--------------------------------------------------------------------------------
1 | # Auto detect text files and perform LF normalization
2 | * text=auto
3 |
--------------------------------------------------------------------------------
/DynamicFinder/Proc.fs:
--------------------------------------------------------------------------------
1 | module Proc
2 |
3 | open System
4 | open System.Diagnostics
5 | open System.ComponentModel
6 | open System.Management
7 |
8 | type Service =
9 | { Name: string
10 | Path: string
11 | }
12 |
13 | let runningProcs =
14 | let query = "SELECT * FROM Win32_Process"
15 | let searcher = new ManagementObjectSearcher(query)
16 |
17 | let processes =
18 | [ for service in searcher.Get() ->
19 | { Name = string service["Name"]
20 | Path = string service["ExecutablePath"]
21 | } ]
22 | processes
23 |
--------------------------------------------------------------------------------
/DynamicFinder/DynamicFinder.fsproj:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 | Exe
5 | net6.0
6 |
7 |
8 |
9 |
10 |
11 |
12 |
13 |
14 |
15 |
16 |
17 |
18 |
19 |
20 |
21 |
22 |
--------------------------------------------------------------------------------
/DynamicFinder.sln:
--------------------------------------------------------------------------------
1 |
2 | Microsoft Visual Studio Solution File, Format Version 12.00
3 | # Visual Studio Version 17
4 | VisualStudioVersion = 17.5.33530.505
5 | MinimumVisualStudioVersion = 10.0.40219.1
6 | Project("{F2A71F9B-5D33-465A-A702-920D77279786}") = "DynamicFinder", "DynamicFinder\DynamicFinder.fsproj", "{54AD0D99-6919-4B85-96A4-F878F6E95E10}"
7 | EndProject
8 | Global
9 | GlobalSection(SolutionConfigurationPlatforms) = preSolution
10 | Debug|Any CPU = Debug|Any CPU
11 | Release|Any CPU = Release|Any CPU
12 | EndGlobalSection
13 | GlobalSection(ProjectConfigurationPlatforms) = postSolution
14 | {54AD0D99-6919-4B85-96A4-F878F6E95E10}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
15 | {54AD0D99-6919-4B85-96A4-F878F6E95E10}.Debug|Any CPU.Build.0 = Debug|Any CPU
16 | {54AD0D99-6919-4B85-96A4-F878F6E95E10}.Release|Any CPU.ActiveCfg = Release|Any CPU
17 | {54AD0D99-6919-4B85-96A4-F878F6E95E10}.Release|Any CPU.Build.0 = Release|Any CPU
18 | EndGlobalSection
19 | GlobalSection(SolutionProperties) = preSolution
20 | HideSolutionNode = FALSE
21 | EndGlobalSection
22 | GlobalSection(ExtensibilityGlobals) = postSolution
23 | SolutionGuid = {CAFF6AD0-32ED-442E-8922-EFAAD1B80B0D}
24 | EndGlobalSection
25 | EndGlobal
26 |
--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
1 | # DynamicFinder
2 | A DLL sideloading utility.
3 |
4 | DynamicFinder will search every running process for DLL sideloading opportunities.
5 |
6 | Dynamic Finder will create proxy DLLs for any potencial targets.
7 |
8 | ```
9 | Usage: DynamicFinder [User|Group]
10 | PS C:\DynamicFinder> dotnet run Users
11 | [*] Running...
12 | [*] There are 2 directories from running applications we can write to.
13 | [+] There are 5 DLLs we can use for C:\Program Files (x86)\Steam\steam.exe
14 | - COMCTL32.dll
15 | - VERSION.dll
16 | - CRYPT32.dll
17 | - WSOCK32.dll
18 | - bcrypt.dll
19 | [+] There are 3 DLLs we can use for C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
20 | - WINMM.dll
21 | - dbghelp.dll
22 | - bcrypt.dll
23 | ```
24 |
25 | ```
26 | [*] Created proxy for UIAutomationCore.c
27 | ```
28 |
29 | ```cpp
30 | // UIAutomationCore.c
31 | #include
32 |
33 |
34 | BOOL APIENTRY DllMain( HMODULE hModule,
35 | DWORD ul_reason_for_call,
36 | LPVOID lpReserved
37 | )
38 | {
39 | switch (ul_reason_for_call)
40 | {
41 | case DLL_PROCESS_ATTACH:
42 | case DLL_THREAD_ATTACH:
43 | case DLL_THREAD_DETACH:
44 | case DLL_PROCESS_DETACH:
45 | break;
46 | }
47 | return TRUE;
48 | }
49 |
50 | #pragma comment(linker,"/export:DllGetActivationFactory=C:\\Windows\\System32\\UIAutomationCore.DLL.DllGetActivationFactory,@1")
51 | #pragma comment(linker,"/export:DllCanUnloadNow=C:\\Windows\\System32\\UIAutomationCore.DLL.DllCanUnloadNow,@2")
52 | #pragma comment(linker,"/export:DllGetClassObject=C:\\Windows\\System32\\UIAutomationCore.DLL.DllGetClassObject,@3")
53 | // ...
54 | ```
55 |
56 |
57 | This is a rewrite of a tool I'd previously written.
58 |
--------------------------------------------------------------------------------
/DynamicFinder/Program.fs:
--------------------------------------------------------------------------------
1 | open System
2 | open System.Diagnostics
3 | open System.DirectoryServices.AccountManagement
4 | open System.IO
5 | open System.Management
6 | open System.ServiceProcess
7 | open System.Reflection
8 |
9 | let printProcesses processes =
10 | processes
11 | |> Seq.map (fun (proc: Process) -> proc.ProcessName)
12 | |> Seq.iter (printfn "%s")
13 |
14 | let printServices services =
15 | services
16 | |> Seq.map (fun (service: ServiceController) -> service.DisplayName)
17 | |> Seq.iter (printfn "%s")
18 |
19 |
20 | let args = Environment.GetCommandLineArgs()
21 |
22 | let user: string =
23 | match args.Length with
24 | | 0
25 | | 1 ->
26 | eprintfn $"Usage: %s{Assembly.GetEntryAssembly().GetName().Name} [User|Group]"
27 | exit 1
28 | | _ -> args[1].ToLower()
29 |
30 | let wmiSearch (query: string) =
31 | let searcher = new ManagementObjectSearcher(query)
32 | let search = searcher.Get()
33 |
34 | seq
35 | [| for result in search ->
36 |
37 | result |]
38 |
39 | let allUsers = wmiSearch "SELECT * FROM Win32_UserAccount"
40 |
41 | let allGroups = wmiSearch "SELECT * FROM Win32_Group"
42 |
43 | if isNull (Principal.FindByIdentity(new PrincipalContext(ContextType.Machine), user)) then
44 | eprintfn $"[*] '%s{args[1]}' was not found."
45 | printfn "[*] Possible values for users are:"
46 |
47 | for result in allUsers do
48 | printfn "\t- %s" (string result["Name"])
49 |
50 | printfn "[*] Possible values for groups are:"
51 |
52 | for result in allGroups do
53 | printfn "\t- %s" (string result["Name"])
54 |
55 | exit 1
56 |
57 | printfn "[*] Running..."
58 |
59 | let runningProcs = Proc.runningProcs
60 |
61 | let runningFilenames =
62 | runningProcs |> Seq.map (fun proc -> proc.Path)
63 | |> Seq.distinct
64 |
65 | let writableDirectories =
66 | runningFilenames
67 | |> Seq.filter (fun path -> Dll.canWriteToDirectory (Path.GetDirectoryName(path), user))
68 |
69 | printfn $"[*] There are %d{Seq.length writableDirectories} directories from running applications we can write to."
70 |
71 | let displayDlls path dlls =
72 | if Seq.length dlls <> 0 then
73 | printfn $"[+] There are %d{Seq.length dlls} DLLs we can use for %s{path}"
74 |
75 | dlls |> Seq.iter (fun dll -> printfn $"\t- %s{dll}")
76 |
77 |
78 | let mutable createdProxies = [||]
79 |
80 | let dlls = writableDirectories |> Seq.map Dll.getDlls
81 |
82 | Seq.iter2 displayDlls writableDirectories dlls
83 |
84 | let createProxy =
85 | if not (Directory.Exists("Output")) then
86 | Directory.CreateDirectory("Output") |> ignore
87 |
88 | for dllFiles in dlls do
89 | for dll in dllFiles do
90 | let filePath =
91 | Path.Join("Output", dll.Replace(".dll", ".c", StringComparison.OrdinalIgnoreCase))
92 |
93 | if not (createdProxies |> Seq.contains filePath) then
94 | let result = Dll.proxyDll dll
95 | File.WriteAllText(filePath, result)
96 | createdProxies <- Array.append createdProxies [| filePath |]
97 | printfn $"[*] Created proxy for %s{Path.GetFileName(filePath)}"
98 |
--------------------------------------------------------------------------------
/DynamicFinder/Dll.fs:
--------------------------------------------------------------------------------
1 | module Dll
2 |
3 | open System
4 | open System.IO
5 | open Microsoft.Win32
6 | open System.Security.AccessControl
7 | open System.DirectoryServices.AccountManagement
8 |
9 | let knownDlls =
10 | let keyName = @"SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs"
11 | let key = (Registry.LocalMachine.OpenSubKey keyName)
12 |
13 | key.GetValueNames()
14 | |> Seq.map key.GetValue
15 | |> Seq.map (fun dll -> (string dll).ToLower())
16 |
17 |
18 | let getDlls (path: string) =
19 | let dllFilters = [ "ntdll.dll" ]
20 |
21 | try
22 | let pe = PeNet.PeFile(path)
23 | let isApiSet (name: string) = name.ToLower().StartsWith "api-ms"
24 |
25 | let isKnownDll (name: string) =
26 | knownDlls |> Seq.contains (name.ToLower())
27 |
28 | let dlls =
29 | match pe.ImportedFunctions with
30 | | null -> Seq.empty
31 | | functions -> functions
32 | |> Seq.filter (fun func -> not (isNull func))
33 | |> Seq.map (fun f -> f.DLL)
34 | |> Seq.filter (fun dll -> not (isNull dll))
35 | |> Seq.distinct
36 | |> Seq.filter (fun dll -> not (isApiSet dll || isKnownDll dll || Seq.contains dll dllFilters))
37 | |> Seq.filter (fun dll -> not (File.Exists($@"{Path.GetDirectoryName(path)}\{dll}")))
38 |
39 | dlls
40 | with _ ->
41 | []
42 |
43 | let canWriteToDirectory (directory, user) =
44 | try
45 | let directorySecurity = DirectorySecurity(directory, AccessControlSections.Access)
46 |
47 | let accessRules =
48 | directorySecurity.GetAccessRules(true, true, typeof)
49 |
50 | let context = new PrincipalContext(ContextType.Machine)
51 |
52 | [ for rule in accessRules do
53 | let rule = rule :?> FileSystemAccessRule
54 | let sid = rule.IdentityReference.Value
55 | let principal = Principal.FindByIdentity(context, IdentityType.Sid, sid)
56 |
57 | if
58 | rule.FileSystemRights.HasFlag(FileSystemRights.Write)
59 | && principal.Name.ToLower() = user
60 | then
61 | rule ]
62 | .Length
63 | <> 0
64 | with
65 | | :? UnauthorizedAccessException
66 | | :? InvalidCastException
67 | | :? ArgumentException as ex -> false
68 |
69 | let proxies: string[] = [||]
70 |
71 | let proxyReplace (exports: seq, path: string) =
72 | Seq.map
73 | (fun (export: PeNet.Header.Pe.ExportFunction) ->
74 | let formatted =
75 | $@"#pragma comment(linker,""/export:%s{export.Name}=%s{path}.%s{export.Name},@%d{export.Ordinal}"")"
76 |
77 | formatted.Replace(@"\", @"\\").Replace(".dll", ""))
78 | exports
79 |
80 | let rec proxyDll (dll: string) =
81 | let windowsPath = Path.Join(@"C:\Windows\", dll)
82 | let system32Path = Path.Join(@"C:\Windows\System32", dll)
83 | let sysWow64Path = Path.Join(@"C:\Windows\SysWOW64", dll)
84 | let path = [ windowsPath; system32Path; sysWow64Path ] |> Seq.filter File.Exists
85 | let path = Seq.head path
86 | let file = File.OpenRead(path)
87 | let pe = PeNet.PeFile(file)
88 | let exports = pe.ExportedFunctions |> Seq.filter (fun f -> f.HasName)
89 | let exports = proxyReplace (exports, path) |> String.concat "\n"
90 |
91 | let result =
92 | "#include \n\n"
93 | + "\n"
94 | + "BOOL APIENTRY DllMain( HMODULE hModule,\n"
95 | + " DWORD ul_reason_for_call,\n"
96 | + " LPVOID lpReserved\n"
97 | + " )\n"
98 | + "{\n"
99 | + " switch (ul_reason_for_call)\n"
100 | + " {\n"
101 | + " case DLL_PROCESS_ATTACH:\n"
102 | + " case DLL_THREAD_ATTACH:\n"
103 | + " case DLL_THREAD_DETACH:\n"
104 | + " case DLL_PROCESS_DETACH:\n"
105 | + " break;\n"
106 | + " }\n"
107 | + " return TRUE;\n"
108 | + "}\n\n"
109 | + $"{exports}\n"
110 |
111 | result
112 |
--------------------------------------------------------------------------------
/.gitignore:
--------------------------------------------------------------------------------
1 | ## Ignore Visual Studio temporary files, build results, and
2 | ## files generated by popular Visual Studio add-ons.
3 | ##
4 | ## Get latest from https://github.com/github/gitignore/blob/main/VisualStudio.gitignore
5 |
6 | # User-specific files
7 | *.rsuser
8 | *.suo
9 | *.user
10 | *.userosscache
11 | *.sln.docstates
12 |
13 | # User-specific files (MonoDevelop/Xamarin Studio)
14 | *.userprefs
15 |
16 | # Mono auto generated files
17 | mono_crash.*
18 |
19 | # Build results
20 | [Dd]ebug/
21 | [Dd]ebugPublic/
22 | [Rr]elease/
23 | [Rr]eleases/
24 | x64/
25 | x86/
26 | [Ww][Ii][Nn]32/
27 | [Aa][Rr][Mm]/
28 | [Aa][Rr][Mm]64/
29 | bld/
30 | [Bb]in/
31 | [Oo]bj/
32 | [Ll]og/
33 | [Ll]ogs/
34 |
35 | # Visual Studio 2015/2017 cache/options directory
36 | .vs/
37 | # Uncomment if you have tasks that create the project's static files in wwwroot
38 | #wwwroot/
39 |
40 | # Visual Studio 2017 auto generated files
41 | Generated\ Files/
42 |
43 | # MSTest test Results
44 | [Tt]est[Rr]esult*/
45 | [Bb]uild[Ll]og.*
46 |
47 | # NUnit
48 | *.VisualState.xml
49 | TestResult.xml
50 | nunit-*.xml
51 |
52 | # Build Results of an ATL Project
53 | [Dd]ebugPS/
54 | [Rr]eleasePS/
55 | dlldata.c
56 |
57 | # Benchmark Results
58 | BenchmarkDotNet.Artifacts/
59 |
60 | # .NET Core
61 | project.lock.json
62 | project.fragment.lock.json
63 | artifacts/
64 |
65 | # ASP.NET Scaffolding
66 | ScaffoldingReadMe.txt
67 |
68 | # StyleCop
69 | StyleCopReport.xml
70 |
71 | # Files built by Visual Studio
72 | *_i.c
73 | *_p.c
74 | *_h.h
75 | *.ilk
76 | *.meta
77 | *.obj
78 | *.iobj
79 | *.pch
80 | *.pdb
81 | *.ipdb
82 | *.pgc
83 | *.pgd
84 | *.rsp
85 | *.sbr
86 | *.tlb
87 | *.tli
88 | *.tlh
89 | *.tmp
90 | *.tmp_proj
91 | *_wpftmp.csproj
92 | *.log
93 | *.tlog
94 | *.vspscc
95 | *.vssscc
96 | .builds
97 | *.pidb
98 | *.svclog
99 | *.scc
100 |
101 | # Chutzpah Test files
102 | _Chutzpah*
103 |
104 | # Visual C++ cache files
105 | ipch/
106 | *.aps
107 | *.ncb
108 | *.opendb
109 | *.opensdf
110 | *.sdf
111 | *.cachefile
112 | *.VC.db
113 | *.VC.VC.opendb
114 |
115 | # Visual Studio profiler
116 | *.psess
117 | *.vsp
118 | *.vspx
119 | *.sap
120 |
121 | # Visual Studio Trace Files
122 | *.e2e
123 |
124 | # TFS 2012 Local Workspace
125 | $tf/
126 |
127 | # Guidance Automation Toolkit
128 | *.gpState
129 |
130 | # ReSharper is a .NET coding add-in
131 | _ReSharper*/
132 | *.[Rr]e[Ss]harper
133 | *.DotSettings.user
134 |
135 | # TeamCity is a build add-in
136 | _TeamCity*
137 |
138 | # DotCover is a Code Coverage Tool
139 | *.dotCover
140 |
141 | # AxoCover is a Code Coverage Tool
142 | .axoCover/*
143 | !.axoCover/settings.json
144 |
145 | # Coverlet is a free, cross platform Code Coverage Tool
146 | coverage*.json
147 | coverage*.xml
148 | coverage*.info
149 |
150 | # Visual Studio code coverage results
151 | *.coverage
152 | *.coveragexml
153 |
154 | # NCrunch
155 | _NCrunch_*
156 | .*crunch*.local.xml
157 | nCrunchTemp_*
158 |
159 | # MightyMoose
160 | *.mm.*
161 | AutoTest.Net/
162 |
163 | # Web workbench (sass)
164 | .sass-cache/
165 |
166 | # Installshield output folder
167 | [Ee]xpress/
168 |
169 | # DocProject is a documentation generator add-in
170 | DocProject/buildhelp/
171 | DocProject/Help/*.HxT
172 | DocProject/Help/*.HxC
173 | DocProject/Help/*.hhc
174 | DocProject/Help/*.hhk
175 | DocProject/Help/*.hhp
176 | DocProject/Help/Html2
177 | DocProject/Help/html
178 |
179 | # Click-Once directory
180 | publish/
181 |
182 | # Publish Web Output
183 | *.[Pp]ublish.xml
184 | *.azurePubxml
185 | # Note: Comment the next line if you want to checkin your web deploy settings,
186 | # but database connection strings (with potential passwords) will be unencrypted
187 | *.pubxml
188 | *.publishproj
189 |
190 | # Microsoft Azure Web App publish settings. Comment the next line if you want to
191 | # checkin your Azure Web App publish settings, but sensitive information contained
192 | # in these scripts will be unencrypted
193 | PublishScripts/
194 |
195 | # NuGet Packages
196 | *.nupkg
197 | # NuGet Symbol Packages
198 | *.snupkg
199 | # The packages folder can be ignored because of Package Restore
200 | **/[Pp]ackages/*
201 | # except build/, which is used as an MSBuild target.
202 | !**/[Pp]ackages/build/
203 | # Uncomment if necessary however generally it will be regenerated when needed
204 | #!**/[Pp]ackages/repositories.config
205 | # NuGet v3's project.json files produces more ignorable files
206 | *.nuget.props
207 | *.nuget.targets
208 |
209 | # Microsoft Azure Build Output
210 | csx/
211 | *.build.csdef
212 |
213 | # Microsoft Azure Emulator
214 | ecf/
215 | rcf/
216 |
217 | # Windows Store app package directories and files
218 | AppPackages/
219 | BundleArtifacts/
220 | Package.StoreAssociation.xml
221 | _pkginfo.txt
222 | *.appx
223 | *.appxbundle
224 | *.appxupload
225 |
226 | # Visual Studio cache files
227 | # files ending in .cache can be ignored
228 | *.[Cc]ache
229 | # but keep track of directories ending in .cache
230 | !?*.[Cc]ache/
231 |
232 | # Others
233 | ClientBin/
234 | ~$*
235 | *~
236 | *.dbmdl
237 | *.dbproj.schemaview
238 | *.jfm
239 | *.pfx
240 | *.publishsettings
241 | orleans.codegen.cs
242 |
243 | # Including strong name files can present a security risk
244 | # (https://github.com/github/gitignore/pull/2483#issue-259490424)
245 | #*.snk
246 |
247 | # Since there are multiple workflows, uncomment next line to ignore bower_components
248 | # (https://github.com/github/gitignore/pull/1529#issuecomment-104372622)
249 | #bower_components/
250 |
251 | # RIA/Silverlight projects
252 | Generated_Code/
253 |
254 | # Backup & report files from converting an old project file
255 | # to a newer Visual Studio version. Backup files are not needed,
256 | # because we have git ;-)
257 | _UpgradeReport_Files/
258 | Backup*/
259 | UpgradeLog*.XML
260 | UpgradeLog*.htm
261 | ServiceFabricBackup/
262 | *.rptproj.bak
263 |
264 | # SQL Server files
265 | *.mdf
266 | *.ldf
267 | *.ndf
268 |
269 | # Business Intelligence projects
270 | *.rdl.data
271 | *.bim.layout
272 | *.bim_*.settings
273 | *.rptproj.rsuser
274 | *- [Bb]ackup.rdl
275 | *- [Bb]ackup ([0-9]).rdl
276 | *- [Bb]ackup ([0-9][0-9]).rdl
277 |
278 | # Microsoft Fakes
279 | FakesAssemblies/
280 |
281 | # GhostDoc plugin setting file
282 | *.GhostDoc.xml
283 |
284 | # Node.js Tools for Visual Studio
285 | .ntvs_analysis.dat
286 | node_modules/
287 |
288 | # Visual Studio 6 build log
289 | *.plg
290 |
291 | # Visual Studio 6 workspace options file
292 | *.opt
293 |
294 | # Visual Studio 6 auto-generated workspace file (contains which files were open etc.)
295 | *.vbw
296 |
297 | # Visual Studio 6 auto-generated project file (contains which files were open etc.)
298 | *.vbp
299 |
300 | # Visual Studio 6 workspace and project file (working project files containing files to include in project)
301 | *.dsw
302 | *.dsp
303 |
304 | # Visual Studio 6 technical files
305 | *.ncb
306 | *.aps
307 |
308 | # Visual Studio LightSwitch build output
309 | **/*.HTMLClient/GeneratedArtifacts
310 | **/*.DesktopClient/GeneratedArtifacts
311 | **/*.DesktopClient/ModelManifest.xml
312 | **/*.Server/GeneratedArtifacts
313 | **/*.Server/ModelManifest.xml
314 | _Pvt_Extensions
315 |
316 | # Paket dependency manager
317 | .paket/paket.exe
318 | paket-files/
319 |
320 | # FAKE - F# Make
321 | .fake/
322 |
323 | # CodeRush personal settings
324 | .cr/personal
325 |
326 | # Python Tools for Visual Studio (PTVS)
327 | __pycache__/
328 | *.pyc
329 |
330 | # Cake - Uncomment if you are using it
331 | # tools/**
332 | # !tools/packages.config
333 |
334 | # Tabs Studio
335 | *.tss
336 |
337 | # Telerik's JustMock configuration file
338 | *.jmconfig
339 |
340 | # BizTalk build output
341 | *.btp.cs
342 | *.btm.cs
343 | *.odx.cs
344 | *.xsd.cs
345 |
346 | # OpenCover UI analysis results
347 | OpenCover/
348 |
349 | # Azure Stream Analytics local run output
350 | ASALocalRun/
351 |
352 | # MSBuild Binary and Structured Log
353 | *.binlog
354 |
355 | # NVidia Nsight GPU debugger configuration file
356 | *.nvuser
357 |
358 | # MFractors (Xamarin productivity tool) working folder
359 | .mfractor/
360 |
361 | # Local History for Visual Studio
362 | .localhistory/
363 |
364 | # Visual Studio History (VSHistory) files
365 | .vshistory/
366 |
367 | # BeatPulse healthcheck temp database
368 | healthchecksdb
369 |
370 | # Backup folder for Package Reference Convert tool in Visual Studio 2017
371 | MigrationBackup/
372 |
373 | # Ionide (cross platform F# VS Code tools) working folder
374 | .ionide/
375 |
376 | # Fody - auto-generated XML schema
377 | FodyWeavers.xsd
378 |
379 | # VS Code files for those working on multiple tools
380 | .vscode/*
381 | !.vscode/settings.json
382 | !.vscode/tasks.json
383 | !.vscode/launch.json
384 | !.vscode/extensions.json
385 | *.code-workspace
386 |
387 | # Local History for Visual Studio Code
388 | .history/
389 |
390 | # Windows Installer files from build outputs
391 | *.cab
392 | *.msi
393 | *.msix
394 | *.msm
395 | *.msp
396 |
397 | # JetBrains Rider
398 | *.sln.iml
399 |
--------------------------------------------------------------------------------