Questions tagged [sandbox]
A sandbox is a security mechanism for containing and restricting untrusted programs. Such programs could contain malicious code, which would otherwise harm the user's system.
207
questions
0
votes
0
answers
56
views
What kind of USB-based attacks can be prevented by a VM?
The answer provided to this question by forest has a good summary explaining the types of attacks that a malicious USB can do.
Does USB redirection in a VM provide any protection against any of these ...
0
votes
0
answers
34
views
Apparmor profile for executing untrusted binaries for online judge
I am writing an online judge so I need to sandbox execution of untrusted binaries for judging and for that, I am using apparmor. Here's my current simple profile:
#include <tunables/global>
...
2
votes
1
answer
481
views
Is it possible for a Virus to "leave" the Windows Sandbox (VM) and infect the host system?
Im using Windows 11 Pro. It has a feature called "Windows Sandbox", which is basically a virtual machine.
If im getting a Virus inside of this sandbox, is it possible for that Virus to ...
- 43
1
vote
0
answers
34
views
The simplest measures to run short code snippets securely on AWS Lambda
I would like to use AWS Lambda to run solutions to programming problems for an online courses website. So far, I use simple eval in my lambda function. However, many posts (e.g. this and this) suggest ...
- 111
0
votes
1
answer
89
views
How to know if you have downloaded a malware on a virtual machine [duplicate]
First, I'm a complete beginner, my only experience in malware is running windows defender lol. But I will try my best to learn anything that you guys recommend.
My younger brother keeps downloading ...
1
vote
0
answers
71
views
Is using a singularity sandbox an effective way to increase security through isolation / compartmentalization?
I am using singularity sandboxes in my workflow for several reasons unrelated to security. However, after using it a bit, I am now wondering: is using a singularity sandbox an effective way to ...
- 297
0
votes
0
answers
34
views
Unable to Understand the Data Flow and Network Security Architecture
Received the attached Network Connectivity Diagram with Network Security Components Integrated in the Network
Can some body explain how the Network Security is Applied for Threat and Intrusion ...
0
votes
1
answer
113
views
Is Sandboxieplus safe against credential grabber?
On the default settings, does https://sandboxie-plus.com/ protect against credential grabbers?
- 3
0
votes
0
answers
79
views
Build Ransomware analysis lab
Could somebody help me with the following questions:
Does a sandbox adds extra security over a virtual machine host-guest interaction, or does it only provide a security analysis (API call sequences ...
- 35
0
votes
1
answer
231
views
user namespaces: do they increase security, or introduce new attack surface?
user namespaces in Linux are presented as a security feature, which should increase security. But is this really true?
Is it possible that while user namespaces fix one kind of problem, they introduce ...
- 2,129
1
vote
1
answer
144
views
Cuckoo dump a PE file from a memory dump?
Can Cuckoo extract PE files from a memory dump or record the import table of the running process? I need to record the import table in PE not the called/executed API from the process.
There is Process-...
- 113
0
votes
0
answers
27
views
How does a malware differentiate between a real user device from a sandbox? [duplicate]
I'm currently working on malware evasions. As far as I know, malware can tell sandboxes from real user devices by examining device characteristics like wear and tear, looking for human-like behavior ...
0
votes
0
answers
82
views
How to ensure safety while visiting malicious links in a VM? [duplicate]
Just wanted to ask how dangerous would it be to visit malicious links in a VM? The reason why I want to do this is to test out a tool I wrote that identifies malicious links from a database and ...
1
vote
0
answers
162
views
How do I go about analysing VirusTotal and Hatching Triage's memdumps?
I normally use volatility to analyse memory dumps, however, in this case it doesn't seem to be working. I get a "Symbol table not found" kind of error, even though I have downloaded and ...
- 33
0
votes
0
answers
680
views
How do I recklessly browse the web, download suspicious files and run them with as low a risk as possible? [duplicate]
I have recently found out about the existence of virtual machines they can be used to run viruses in an isolated environment from the host computer, like virtual box, vmware and sandboxie. However, I'...
- 1
-1
votes
1
answer
274
views
How much secure are modern browsers?
Modern web browsers like Firefox, Chrome and Chromium based browsers are getting new features everyday. They also have PWA. Unlike Android, browsers on Windows, MacOS, Linux and BSD don't run inside ...
user281798
2
votes
1
answer
171
views
What sandbox does an <object> element run in? Can this sandbox be configured?
I run a site that displays user-generated SVGs. They are untrusted, so they need to be sandboxed.
I currently embed these SVGs using <object> elements. (Unlike <img>, this allows loading ...
- 123
0
votes
1
answer
351
views
How to store malware for analysis?
I am planning on analysing some malware samples dynamically using a sandbox tool and a target Windows VM. The host (physical machine) runs Ubuntu and in it are the sandbox and target VM.
So far I only ...
- 1,165
2
votes
1
answer
89
views
Security of a ro volume in Docker
What are the security implications of mapping a host folder to a Docker container ro? For example -v /usr/local/bin:/usr/local/bin:ro.
Of course, the container can now read the host folder. But, ...
- 267
1
vote
0
answers
119
views
How can I enforce a security sandbox with any process?
Deno (the node.js fork) is designed to be secure by default. Therefore, unless you specifically enable it, a program run with Deno has no file, network, or environment access. Deno has a set of ...
- 111
2
votes
1
answer
161
views
Is it possible to move image files from a text thread on a phone to a virtual box without downloading them?
I'm looking into a spam bot that's been sending me messages on my phone (Samsung s10). It's sent a couple images that I want to try and scrape for metadata and do a reverse image search on. Since the ...
- 21
0
votes
1
answer
2k
views
Is there a more convenient, yet safe, way to run DOSBox-X than I'm currently doing it?
I recently learned about DOSBox-X. It's basically a somewhat less awful version of the basically-abandoned DOSBox.
I currently have it installed inside a Windows 10 VM inside of my Windows 10 bare ...
- 1
1
vote
0
answers
119
views
Do modern video game consoles sandbox games? [closed]
If for example there is a game, that is specifically designed to try to get control of your game console or to be able to provide the user of the game control over their system and somehow got onto ...
- 973
55
votes
6
answers
20k
views
If malware does not run in a VM why not make everything a VM?
There is a lot of malware that can detect whether it is running inside a VM or sandboxed environment and if such environment is detected it can conceal it self and not execute. So why not make ...
- 1,165
1
vote
1
answer
546
views
Why does sandboxie require admin privileges when it runs a software installer that requires it?
Shouldn't it just "emulate" the admin privileges like everything else? Why dose it actually require it? And is there any security problems with that?
- 171
1
vote
1
answer
123
views
Is there a way to tell what the file does before opening it?
You have just noticed that an unknown executable file has been downloaded to your machine.
Is there a way to tell what the file does before opening it?
- 11
6
votes
1
answer
339
views
Web Assembly Security
I'm excited about the prospects of web-assembly for the future, but I'm curious if this will have the same security ramifications of Java Applets.
What are some of the reasons why web assembly is ...
- 163
1
vote
1
answer
729
views
How does Chromium's sandboxing compare to Firejail's?
I am increasingly being requested to join videoconferences through Zoom, which I don't trust to run on my machine. I understand that there are two common ways of sandboxing this software: you can ...
- 655
3
votes
1
answer
197
views
How realistic is to be 'hacked' by ONLY clicking a link [duplicate]
In the case of phishing training, most training will say "don't click the link, you can get hacked!"
If there was an exploit that could bypass the chrome sandbox on an up-to-date verison of ...
- 31
0
votes
1
answer
97
views
Seeking recommendations/warnings for creating a server for malware sample upload and analysis
I am trying to conceptualize a server where users can upload potentially dangerous malware samples to a server. They would not need to be stored in the file system per se but kept in memory long ...
3
votes
2
answers
884
views
Why aren't Microsoft Office macros sandboxed?
For about 20+ years now, Microsoft Office macros have been used to spread malware. Even in recent years those threats have not disappeared and they often resurface in one form or another e.g. World’s ...
- 307
0
votes
2
answers
468
views
Safe mobile browsing
What actions can I take to make web browsing on mobile phone (android) as safe as possible? My main concern are sites that would install malware (has happened before on desktop computer). On a ...
- 1
3
votes
1
answer
4k
views
Can I safely run a virus using sandboxie? [duplicate]
I want to test some untrusted software to check them, for this reason, I researched for a good sandbox software and I found Sandboxie I tested few safe application, but I am not sure if I can run ...
- 1,357
4
votes
1
answer
3k
views
Is Windows Sandbox a viable alternative to conventional VM solutions considering its design?
The idea of having a fast, disposable VM at the palm of my hand appeals to me very much. It makes adding an extra layer of security to any thing I want to do so easy - just launch the sandbox ...
- 224
1
vote
1
answer
471
views
Is it safer to run executable file (not safe, may contain virus) on VBox [duplicate]
I have a host system (Windows 10) with premium antivirus and running a Windows 7 in Virtualbox with no antivirus. I have installed sandboxie and try to run executable files that may contain virus. Is ...
1
vote
1
answer
375
views
Securely analyze and format a USB flash drive
I need to scan the contents of a USB stick with several antivirus software. I have several ways to do this.
Either I mount the key, I scan its contents (I may place the suspicious files in ...
- 11
2
votes
0
answers
198
views
Windows command bypassing Sandboxie
Using Sandboxie typing net user some_user some_password, on a sandboxed cmd, actually changes the password of the real user. Is this intentional?
It is just a default Sandboxie installation running ...
- 21
4
votes
1
answer
336
views
Disguise System as VM
Malware sometimes uses anti-vm and anti-sandbox behavior to act like harmless software.
Wouldn't it be a good prevention strategy to disguise the host machine as a VM so that potential malware would ...
- 41
2
votes
2
answers
2k
views
What's the safest virtualization tool for running unsafe software - VirtualBox vs Windows Sandbox vs Hyper-V [closed]
I'd want to ask, what's the safest environment to run potentially unsafe software?
I'm aware that this question may be very tricky, because each of those may have its flaws, but generally speaking ...
- 219
1
vote
3
answers
457
views
If we integrate CDR in our email solution, do we really need Sandbox as well?
In the case of social engineering attack vector is an email sent with a malicious attachment like XSL file, I am not really understanding where we will need Sandbox solution if we can just use CDR (...
- 1,254
1
vote
1
answer
243
views
Prevent an application from making any network access on macOS
I want to run an application on macOS, but preventing it from making any type of network access, or any type of internet access.
I have seen the following possibilities:
Use the built-in firewall. ...
- 343
1
vote
1
answer
247
views
Running virus from real folder in Sandboxie
What if I download a virus to my real folder but only execute it in Sandboxie, is it less secure that if I download it directly from SB?
- 141
3
votes
2
answers
3k
views
Fake output of CPUID instruction
I am trying to analyze a malware in a virtual machine (linux), but it uses the cpuid output to verify if it is in a virtual machine/sandbox, and refuses to run malign code if inside a virtualized ...
- 53
14
votes
3
answers
4k
views
How to securely run Puppeteer / Chromium in a Docker container?
Attempting to run Puppeteer, a Node library to control a headless Chromium (in order to do things like create a PDF of a website), in Docker is a surprisingly fiddly thing.
The problem is that, from ...
- 241
0
votes
1
answer
338
views
Safest way to open PDFs on Android and iOS?
I was checking out Qubes' way of creating safe PDFs, but unless you use Qubes as a daily driver (and use DispVMs to open PDFs) it's still not viable to just use it to create image-based PDFs if you ...
- 121
3
votes
1
answer
848
views
How to sandbox students' Python 3 code submissions for automatic assignment evaluation on Windows 10?
I am the TA for a coding class in which students will have to write Python 3 scripts to solve programming problems. An assignment consists of several problems, and for each problem the student is ...
- 131
1
vote
1
answer
294
views
Will this sandbox my user's javascript from my web IDE properly?
I'm working on an IDE that should run a user's JavaScript in the Browser. I don't want to just eval arbitrary code, especially as code may be shared between users. From here and other sources, I ...
- 143
1
vote
1
answer
2k
views
How much protection does sandbox software provide against malicious .exe?
I need to review a large number of .exe game files. I recently had an incident where I got infected by an .exe that passed all my 'checks': virus scan, Virustotal, reviews, community feedback, ...
- 121
4
votes
3
answers
3k
views
Is there a way to safely run untrusted code on a local machine for a videogame
I want to create a simple videogame engine that can run untrusted custom code in order to add functionality to the game. I thought a about using an akka like concurrent actor system, so that the code ...
- 155
1
vote
1
answer
241
views
Why might malware make a DNS request for an epoch time converter?
I am analyzing malware and I see that two executables when run in a sandbox made DNS requests for www.epochconverter.com
Why would an attacker risk detection by making a network request to ...
- 120