+- Sinisterly (https://sinister.ly)
+-- Forum: Computers (https://sinister.ly/Forum-Computers)
+--- Forum: Software & Programs (https://sinister.ly/Forum-Software-Programs)
+--- Thread: Verifying the safety of a dodgy software (/Thread-Verifying-the-safety-of-a-dodgy-software)
Pages:
1
2
RE: Verifying the safety of a dodgy software - mothered - 03-19-2017
Using a VM, an advanced method Is executing the given file (thus It runs In memory), take a memory snapshot and then perform a memory acquisition (dump) and save It onto the HDD In the form of a dump file.
The dump file can be analyzed thereafter for any malicious content.
RE: Verifying the safety of a dodgy software - lsp - 03-19-2017
Some awesome answers, thanks. VM sandbox escaping is an interesting subject.
RE: Verifying the safety of a dodgy software - Blink - 03-20-2017
As @Silence said, it is possible for malware to break out of VMs.
However, it should be noted that this behavior isn't found often.
RE: Verifying the safety of a dodgy software - Courage - 05-23-2017
(03-20-2017, 03:37 AM)Ender Wrote: As @Silence said, it is possible for malware to break out of VMs.
However, it should be noted that this behavior isn't found often.
Question, what malware does this? I haven't heard of this happening and I'm quite curious. Is there RATs that are capable of this, probably not commercial ones?
RE: Verifying the safety of a dodgy software - Blink - 05-23-2017
(05-23-2017, 12:15 AM)Courage Wrote:(03-20-2017, 03:37 AM)Ender Wrote: As @Silence said, it is possible for malware to break out of VMs.
However, it should be noted that this behavior isn't found often.
Question, what malware does this? I haven't heard of this happening and I'm quite curious. Is there RATs that are capable of this, probably not commercial ones?
https://web.archive.org/web/20130202223332/http://www.darkreading.com/security-services/167801101/security/application-security/217701908/hacking-tool-lets-a-vm-break-out-and-attack-its-host.html
http://www.securityweek.com/vupen-method-breaks-out-virtual-machine-attack-hosts
http://www.infoworld.com/article/2632990/security/excellent-vm-detection-and-breakout-presentation.html
It's mostly hypothetical, so you'll rarely see it.
RE: Verifying the safety of a dodgy software - alexfruir93 - 03-28-2018
Hi, here!
for what purpose do you use it? I think it's harmless, the main thing is to buy from a trusted seller with license.
There is a development of custom application development for your purposes. Install on the computer application read the instructions and enjoy it with pleasure
RE: Verifying the safety of a dodgy software - Bish0pQ - 03-28-2018
(03-28-2018, 08:56 AM)alexfruir93 Wrote: Hi, here!
for what purpose do you use it? I think it's harmless, the main thing is to buy from a trusted seller with license.
There is a development of custom application development for your purposes. Install on the computer application read the instructions and enjoy it with pleasure
If you click the username (https://sinister.ly/User-lsp) you can see that the user hasn't been online for almost more than 6 months. I don't know whether this is considered gravedigging, since you're adding information to the thread, but try to be careful cause you can get your warning level raised because of grave digging.