Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [sandbox]

A sandbox is a security mechanism for containing and restricting untrusted programs. Such programs could contain malicious code, which would otherwise harm the user's system.

Filter by
Sorted by
Tagged with
2 votes
1 answer
143 views

Can I use SELinux to add an extra layer of protection against 0-day VM escape exploits in KVM/QEMU?

My host is Fedora, and I want to add an extra layer of protection against 0day KVM/QEMU exploits that execute code on the host. For example there have been CVEs where if we run a specially crafted ...
OneAndOnly's user avatar
0 votes
0 answers
173 views

How does a hacker get access to the root user when disabling the sandbox in puppeteer, and what does it look like?

You'll see stuff like the first comment here that adding the --no-sandbox flag when launching puppeteer "is a giant security hole" (upvoted many times). Puppeteer troubleshooting docs say &...
Lance's user avatar
  • 632
1 vote
1 answer
142 views

Existence of sandbox to protect programs from a hostile host

As I understand it, a sandbox is an isolated environment on a machine, used to protect the host from the programs in the sandbox. Is there something similar but in reverse, for running important ...
De kot's user avatar
  • 11
0 votes
1 answer
677 views

How to safely download files from Telegram using Sandboxie?

I need to download certain files from Telegram. It is mostly images and videos. I am aware that even this kind of files can contain malicious code, so I want to be 100% safe. (The files usually ...
Martin L's user avatar
  • 103
0 votes
0 answers
189 views

Use a virtual machine to do risky stuff. How to stay as safe as possible? [duplicate]

I have a PC with Ubuntu and Windows in dual boot. I use this PC for basic stuff: Windows for gaming, shopping and common browsing, Ubuntu to do something such as home banking. I was thinking to create ...
koxige9113's user avatar
0 votes
2 answers
187 views

Why don't we sandbox email clients company-wide?

Following on to questions like Sandbox for attachment accessment and How do I safely inspect a suspicious email attachment?. Why don't we sandbox email clients company-wide? I must be missing ...
Danny Schoemann's user avatar
0 votes
0 answers
119 views

How to Safely Research a Suspected Malicious Website by Using A VM [duplicate]

I am aware of a website that I suspect is, at the very least, pulling user data from visitors and possibly performing other malicious activity on visitors. Of course, the safest course of action is to ...
Evan Leahy's user avatar
0 votes
0 answers
118 views

What kind of USB-based attacks can be prevented by a VM?

The answer provided to this question by forest has a good summary explaining the types of attacks that a malicious USB can do. Does USB redirection in a VM provide any protection against any of these ...
GuyIncognito's user avatar
0 votes
0 answers
95 views

Apparmor profile for executing untrusted binaries for online judge

I am writing an online judge so I need to sandbox execution of untrusted binaries for judging and for that, I am using apparmor. Here's my current simple profile: #include <tunables/global> ...
Saad Ahmed's user avatar
3 votes
1 answer
5k views

Is it possible for a Virus to "leave" the Windows Sandbox (VM) and infect the host system?

Im using Windows 11 Pro. It has a feature called "Windows Sandbox", which is basically a virtual machine. If im getting a Virus inside of this sandbox, is it possible for that Virus to ...
Nicole's user avatar
  • 63
1 vote
0 answers
89 views

The simplest measures to run short code snippets securely on AWS Lambda

I would like to use AWS Lambda to run solutions to programming problems for an online courses website. So far, I use simple eval in my lambda function. However, many posts (e.g. this and this) suggest ...
AlwaysLearning's user avatar
0 votes
1 answer
290 views

How to know if you have downloaded a malware on a virtual machine [duplicate]

First, I'm a complete beginner, my only experience in malware is running windows defender lol. But I will try my best to learn anything that you guys recommend. My younger brother keeps downloading ...
you dont need to know this's user avatar
1 vote
0 answers
196 views

Is using a singularity sandbox an effective way to increase security through isolation / compartmentalization?

I am using singularity sandboxes in my workflow for several reasons unrelated to security. However, after using it a bit, I am now wondering: is using a singularity sandbox an effective way to ...
Zorglub29's user avatar
  • 307
0 votes
0 answers
83 views

Unable to Understand the Data Flow and Network Security Architecture

Received the attached Network Connectivity Diagram with Network Security Components Integrated in the Network Can some body explain how the Network Security is Applied for Threat and Intrusion ...
user1092345's user avatar
0 votes
1 answer
236 views

Is Sandboxieplus safe against credential grabber?

On the default settings, does https://sandboxie-plus.com/ protect against credential grabbers?
Rooki's user avatar
  • 3
0 votes
1 answer
755 views

user namespaces: do they increase security, or introduce new attack surface?

user namespaces in Linux are presented as a security feature, which should increase security. But is this really true? Is it possible that while user namespaces fix one kind of problem, they introduce ...
Martin Vegter's user avatar
1 vote
1 answer
276 views

Cuckoo dump a PE file from a memory dump?

Can Cuckoo extract PE files from a memory dump or record the import table of the running process? I need to record the import table in PE not the called/executed API from the process. There is Process-...
0xh3xa's user avatar
  • 113
0 votes
0 answers
29 views

How does a malware differentiate between a real user device from a sandbox? [duplicate]

I'm currently working on malware evasions. As far as I know, malware can tell sandboxes from real user devices by examining device characteristics like wear and tear, looking for human-like behavior ...
imageprocessingproblem's user avatar
1 vote
0 answers
256 views

How do I go about analysing VirusTotal and Hatching Triage's memdumps?

I normally use volatility to analyse memory dumps, however, in this case it doesn't seem to be working. I get a "Symbol table not found" kind of error, even though I have downloaded and ...
CBot's user avatar
  • 33
0 votes
0 answers
1k views

How do I recklessly browse the web, download suspicious files and run them with as low a risk as possible? [duplicate]

I have recently found out about the existence of virtual machines they can be used to run viruses in an isolated environment from the host computer, like virtual box, vmware and sandboxie. However, I'...
Ryou Kei's user avatar
-1 votes
1 answer
358 views

How much secure are modern browsers?

Modern web browsers like Firefox, Chrome and Chromium based browsers are getting new features everyday. They also have PWA. Unlike Android, browsers on Windows, MacOS, Linux and BSD don't run inside ...
user avatar
2 votes
1 answer
307 views

What sandbox does an <object> element run in? Can this sandbox be configured?

I run a site that displays user-generated SVGs. They are untrusted, so they need to be sandboxed. I currently embed these SVGs using <object> elements. (Unlike <img>, this allows loading ...
jameshfisher's user avatar
0 votes
1 answer
600 views

How to store malware for analysis?

I am planning on analysing some malware samples dynamically using a sandbox tool and a target Windows VM. The host (physical machine) runs Ubuntu and in it are the sandbox and target VM. So far I only ...
Marcus's user avatar
  • 1,155
2 votes
1 answer
150 views

Security of a ro volume in Docker

What are the security implications of mapping a host folder to a Docker container ro? For example -v /usr/local/bin:/usr/local/bin:ro. Of course, the container can now read the host folder. But, ...
SRobertJames's user avatar
1 vote
0 answers
167 views

How can I enforce a security sandbox with any process?

Deno (the node.js fork) is designed to be secure by default. Therefore, unless you specifically enable it, a program run with Deno has no file, network, or environment access. Deno has a set of ...
cphoover's user avatar
  • 111
2 votes
1 answer
211 views

Is it possible to move image files from a text thread on a phone to a virtual box without downloading them?

I'm looking into a spam bot that's been sending me messages on my phone (Samsung s10). It's sent a couple images that I want to try and scrape for metadata and do a reverse image search on. Since the ...
Wyatt Wright's user avatar
0 votes
1 answer
2k views

Is there a more convenient, yet safe, way to run DOSBox-X than I'm currently doing it?

I recently learned about DOSBox-X. It's basically a somewhat less awful version of the basically-abandoned DOSBox. I currently have it installed inside a Windows 10 VM inside of my Windows 10 bare ...
Kalo's user avatar
  • 1
1 vote
0 answers
146 views

Do modern video game consoles sandbox games? [closed]

If for example there is a game, that is specifically designed to try to get control of your game console or to be able to provide the user of the game control over their system and somehow got onto ...
Teipekpohkl's user avatar
54 votes
6 answers
21k views

If malware does not run in a VM why not make everything a VM?

There is a lot of malware that can detect whether it is running inside a VM or sandboxed environment and if such environment is detected it can conceal it self and not execute. So why not make ...
Marcus's user avatar
  • 1,155
1 vote
1 answer
698 views

Why does sandboxie require admin privileges when it runs a software installer that requires it?

Shouldn't it just "emulate" the admin privileges like everything else? Why dose it actually require it? And is there any security problems with that?
Hormoz's user avatar
  • 171
1 vote
1 answer
152 views

Is there a way to tell what the file does before opening it?

You have just noticed that an unknown executable file has been downloaded to your machine. Is there a way to tell what the file does before opening it?
hide on bush's user avatar
6 votes
1 answer
381 views

Web Assembly Security

I'm excited about the prospects of web-assembly for the future, but I'm curious if this will have the same security ramifications of Java Applets. What are some of the reasons why web assembly is ...
JacKeown's user avatar
  • 163
1 vote
1 answer
894 views

How does Chromium's sandboxing compare to Firejail's?

I am increasingly being requested to join videoconferences through Zoom, which I don't trust to run on my machine. I understand that there are two common ways of sandboxing this software: you can ...
Psychonaut's user avatar
3 votes
1 answer
243 views

How realistic is to be 'hacked' by ONLY clicking a link [duplicate]

In the case of phishing training, most training will say "don't click the link, you can get hacked!" If there was an exploit that could bypass the chrome sandbox on an up-to-date verison of ...
Eizooz's user avatar
  • 31
0 votes
1 answer
124 views

Seeking recommendations/warnings for creating a server for malware sample upload and analysis

I am trying to conceptualize a server where users can upload potentially dangerous malware samples to a server. They would not need to be stored in the file system per se but kept in memory long ...
user2726232's user avatar
3 votes
2 answers
1k views

Why aren't Microsoft Office macros sandboxed?

For about 20+ years now, Microsoft Office macros have been used to spread malware. Even in recent years those threats have not disappeared and they often resurface in one form or another e.g. World’s ...
Henrique Jung's user avatar
0 votes
2 answers
590 views

Safe mobile browsing

What actions can I take to make web browsing on mobile phone (android) as safe as possible? My main concern are sites that would install malware (has happened before on desktop computer). On a ...
Hoyp's user avatar
  • 1
3 votes
1 answer
5k views

Can I safely run a virus using sandboxie? [duplicate]

I want to test some untrusted software to check them, for this reason, I researched for a good sandbox software and I found Sandboxie I tested few safe application, but I am not sure if I can run ...
Akam's user avatar
  • 1,357
4 votes
1 answer
3k views

Is Windows Sandbox a viable alternative to conventional VM solutions considering its design?

The idea of having a fast, disposable VM at the palm of my hand appeals to me very much. It makes adding an extra layer of security to any thing I want to do so easy - just launch the sandbox ...
Marty Cagas's user avatar
1 vote
1 answer
540 views

Is it safer to run executable file (not safe, may contain virus) on VBox [duplicate]

I have a host system (Windows 10) with premium antivirus and running a Windows 7 in Virtualbox with no antivirus. I have installed sandboxie and try to run executable files that may contain virus. Is ...
Nagaraj Thirthahalli's user avatar
1 vote
1 answer
513 views

Securely analyze and format a USB flash drive

I need to scan the contents of a USB stick with several antivirus software. I have several ways to do this. Either I mount the key, I scan its contents (I may place the suspicious files in ...
Rig0L's user avatar
  • 11
2 votes
0 answers
235 views

Windows command bypassing Sandboxie

Using Sandboxie typing net user some_user some_password, on a sandboxed cmd, actually changes the password of the real user. Is this intentional? It is just a default Sandboxie installation running ...
JohnGRThess's user avatar
4 votes
1 answer
369 views

Disguise System as VM

Malware sometimes uses anti-vm and anti-sandbox behavior to act like harmless software. Wouldn't it be a good prevention strategy to disguise the host machine as a VM so that potential malware would ...
Fiddlesteaks's user avatar
2 votes
2 answers
3k views

What's the safest virtualization tool for running unsafe software - VirtualBox vs Windows Sandbox vs Hyper-V [closed]

I'd want to ask, what's the safest environment to run potentially unsafe software? I'm aware that this question may be very tricky, because each of those may have its flaws, but generally speaking ...
Joelty's user avatar
  • 219
1 vote
3 answers
527 views

If we integrate CDR in our email solution, do we really need Sandbox as well?

In the case of social engineering attack vector is an email sent with a malicious attachment like XSL file, I am not really understanding where we will need Sandbox solution if we can just use CDR (...
Filipon's user avatar
  • 1,294
1 vote
1 answer
368 views

Prevent an application from making any network access on macOS

I want to run an application on macOS, but preventing it from making any type of network access, or any type of internet access. I have seen the following possibilities: Use the built-in firewall. ...
DevShark's user avatar
  • 343
1 vote
1 answer
285 views

Running virus from real folder in Sandboxie

What if I download a virus to my real folder but only execute it in Sandboxie, is it less secure that if I download it directly from SB?
Eduardo M's user avatar
  • 141
3 votes
2 answers
3k views

Fake output of CPUID instruction

I am trying to analyze a malware in a virtual machine (linux), but it uses the cpuid output to verify if it is in a virtual machine/sandbox, and refuses to run malign code if inside a virtualized ...
rmauter's user avatar
  • 53
16 votes
3 answers
5k views

How to securely run Puppeteer / Chromium in a Docker container?

Attempting to run Puppeteer, a Node library to control a headless Chromium (in order to do things like create a PDF of a website), in Docker is a surprisingly fiddly thing. The problem is that, from ...
Torque's user avatar
  • 261
0 votes
1 answer
505 views

Safest way to open PDFs on Android and iOS?

I was checking out Qubes' way of creating safe PDFs, but unless you use Qubes as a daily driver (and use DispVMs to open PDFs) it's still not viable to just use it to create image-based PDFs if you ...
memememe's user avatar
  • 131

1
2 3 4 5