Building Your Own Malware Sandbox
summary
How to build a simple malware sandbox to safely isolate, analyze and handle suspicious files uploaded to web applications. It covers practical, low-effort techniques (not a full antivirus) to detect malicious code, command injections and archive issues like “tarbombs,” and describes technologies and approaches for secure file inspection in web, mobile or desktop contexts.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 3:33What is pentest
- 11:49Flaw detection solutions
- 12:30Building sandbox
- 18:25Analyzing file magic bytes
- 24:31Securing dangerous archives
- 33:42Preventing tarbombs and cleanup
- 35:10Advanced analysis solutions
- 36:57Q&A
related talks
48mCatch me if you can: Building a Web Malware Analyzer using Machine Learning
10mState of the Malware
33mBasic Malware Analysis for Incident Responders
50mHow to Write Malware and Learn How to Fight It!
56mAutomating Linux Malware Analysis Using Limon Sandbox
41mPowerShell Sandbox — Build It Yourself!
37mBuild Automated Malware Lab with CERT.pl Open-Source Software
44mSlime: Automated Anti-Sandboxing Disarmament System