Popularity

1.4

Growing

Activity

5.7

Stars 25

Watchers 2

Forks 3

Last Commit about 1 month ago

Description

This project demonstrates that any NuGet package can run arbitrary code on your machine.

Programming language: C#

License: Apache License 2.0

Tags: Authentication And Authorization Security Code nuget Vulnerability Msbuid Powershell

Latest version: v1.1.3

IAmRoot NuGet Package alternatives and similar packages

Based on the "Authentication and Authorization" category.
Alternatively, view IAmRoot NuGet Package alternatives based on common mentions on social networks and blogs.

ASP.NET Identity

8.9 0.0 L2 IAmRoot NuGet Package VS ASP.NET Identity

DISCONTINUED. New membership system for ASP.NET applications
DotNetOpenAuth

8.5 0.0 L1 IAmRoot NuGet Package VS DotNetOpenAuth

DISCONTINUED. A C# implementation of the OpenID, OAuth and InfoCard protocols

InfluxDB - Power Real-Time Data Analytics at Scale

Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

Promo www.influxdata.com

Cierge

6.7 4.9 IAmRoot NuGet Package VS Cierge

DISCONTINUED. 🗝️ Passwordless OIDC authentication done right
Topaz

5.7 9.5 IAmRoot NuGet Package VS Topaz

Cloud-native authorization for modern applications and APIs
ASP.NET SAML

4.7 5.7 IAmRoot NuGet Package VS ASP.NET SAML

Very simple SAML 2.0 consumer module for ASP.NET/C#
TwoFactorAuth.Net

4.3 0.0 L5 IAmRoot NuGet Package VS TwoFactorAuth.Net

.Net library for Two Factor Authentication (TFA / 2FA)
Stuntman

4.1 1.0 L5 IAmRoot NuGet Package VS Stuntman

DISCONTINUED. Library for impersonating users during development leveraging ASP.NET Identity.
ThinkSharp.Licensing

2.8 0.0 IAmRoot NuGet Package VS ThinkSharp.Licensing

Simple library with fluent API for creating and verifying signed licenses
Logibit Hawk

1.9 0.0 IAmRoot NuGet Package VS Logibit Hawk

A F# Hawk implementation with a strongly typed API that guides your usage and minimises security programming errors.
PwdLess

1.7 0.0 L5 IAmRoot NuGet Package VS PwdLess

DISCONTINUED. Platform-agnostic passwordless authentication that's a joy to use.
IdentityServer

1.4 IAmRoot NuGet Package VS IdentityServer

Extensible OAuth2 and OpenID Connect provider framework.
IdentityModel

1.4 IAmRoot NuGet Package VS IdentityModel

Helper library for identity & access control in .NET 4.5 and MVC4/Web API.
CodeNode.Identity

1.0 0.0 L2 IAmRoot NuGet Package VS CodeNode.Identity

DISCONTINUED. An easy implementation for Identity framework for .net applications
OAuth

0.7 - IAmRoot NuGet Package VS OAuth

A very lightweight library for generating OAuth 1.0a signatures written in C#

* Code Quality Rankings and insights are calculated and provided by Lumnify.
They vary from L1 to L5 with "L5" being the highest.

Do you think we are missing an alternative of IAmRoot NuGet Package or a related project?

Add another 'Authentication and Authorization' Package

Popular Comparisons

README

README.md

IAmRoot NuGet Package

This project demonstrates that any NuGet package can run arbitrary code on your machine.

TL;DR; Installing NuGet packages is (and have always been) a security risk, and you should only install packages from trusted sources and trusted authors.

Background

NuGet used to support PowerShell scripts that could be run manually by developers, or run automatically by NuGet, for example, after packages were installed (install.ps1) or uninstalled (uninstall.ps1), which was useful for packages that needed to perform an initial setup and clean-up things after, on uninstall.

With NuGet v3 and PackageReference, PowerShell script support was modified to no longer execute install and uninstall scripts, with one of the reasons being that they are tightly-coupled to Visual Studio, and inheritantly not cross platform.

Microsoft didn't provide any real alternative or migration path from install.ps1 causing frustration among developers and in September of 2017 the NuGet team started tracking an issue to come up with a strategy for packages that have install.ps1/uninstall.ps1 which, as of this writing over two years later, didn't seem to have any progress.

In discussions, many developers seem to have the false sense that installing NuGet packages became a "safe" operation after Microsoft dropped support for executing PowerShell scripts (e.g. install.ps1), which is not true.

Installing NuGet packages is (and have always been) a security risk, and you should only install packages from trusted sources and trusted authors.

How to Run :rocket:

Add the IAmRoot package from nuget.org in any project:

> dotnet add package IAmRoot

PM> Install-Package IAmRoot

Build the project where the IAmRoot NuGet package was installed: [Build project screenshot](assets/build-project-visual-studio.png)

Your default internet browser should open and display the image below: [I Am Root image](assets/i-am-root.jpg)

Release History

Click on the Releases tab on GitHub.

*Note that all licence references and agreements mentioned in the IAmRoot NuGet Package README section above are relevant to that project's source code only.