搜索资源列表
linux
- 当你想创建一个sandbox给你的系统用户时,本程序非常有用。- This can be very useful if you want to create a sandbox for users on your system, or just log general activity.
Detect_5_Differnet_Sandboxes
- This source can detect 5 different sandbox that used by antivirus.
SP
- VC 写的沙盘技术,非常详细的代码,有驱动-VC wrote sandbox technology, very detailed code, there are drivers
tut_cw_anubis_data
- How to extract information from online sandbox. Video tutorial.
JobObject
- 通过windows的内核对象JobObject实现对程序的运行时间和内存使用的控制,开发初衷是作为一个简陋的acm判题沙箱. 大致步骤: 1.通过CreateJobObject创建一个工作对象 2.通过SetInformationJobObject设置工作对象的参数,详见MSDN(http://msdn.microsoft.com/zh-cn/library/ms686216) 3.以CREATE_SUSPENDED方式启动进程,通过CreatePro
SafeOperation1.2
- 木马行为分析回滚器---SafeOperation1.0 驱动编译环境: WDK 7600.16385.1 “x86 Checked Build Environment” 沙盘是系统中的一个隔离区域,程序可以在此区域中运行,但它不会影响你的电脑。 正常的Windows环境模拟沙盘中的启动程序,但所有的文件存取都被“困住”并在一个隔离的区域执行。通过这种方式,有害的软件再无法进入系统文件或造成其它任何损失。 -Trojan the behavior analysis rollback--- Saf
bb4win
- 沙盒技术源码,可建立一个独立安全的沙盒环境。-The sandbox technology source code, can be the establishment of an independent and secure sandbox environment.
MiniFilter_SandBox
- MiniFilter版本的SandBox沙盘源码,支持夸全盘,simrep的框架,供于研究-SandBox the sandbox source of MiniFilter version supports boast overall simrep framework for research
pediy
- MiniFilter版本的SandBox源码,供于研究,支持夸全盘 -MiniFilter version of the SandBox source for the study, supported boast overall
CVE-2011-1149
- CVE-2011-1149漏洞是 Android 2.3之前的版本没有正确的限制系统属性空间的访问权限,使得本地应用可以绕开应用沙箱提升与Android共享内存相关的特权,如KillingInTheNameOf 和psneuter。与Android共享内存(ashmem) 和ASHMEM_SET_PROT_MASK有关。-CVE-2011-1149 vulnerability is Android 2.3 versions prior to system properties is not pr
IE11SandboxEscapes-master
- IE11 SandBox Bypass Source Code
src
- a driver for Cuckoo Sandbox, it will perform kernel analysis during the execution of a malware. There are many ways for a malware author to bypass Cuckoo detection, he can detect the hooks, hardcodes the Nt* functions to avoid the hooks, detect the
sandbox
- Notify all ValueHandles (if present) that this value is going away.
ebt_stp
- SUID sandbox is using the PID namespace for linux Device Driver.