Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[Solved]Sandboxie & IStealer Leaking[/Solved]

So sandboxie is like unbreakable when it comes to trojans/Worms and such. but an IStealer will run right through it and jack your passwords like nothing...anyway to stop this?

----Edit----
I solved it!!!
Just add
Code
%Local AppData%\Mozilla\
%AppData%\Mozilla\
\Device\Mup\
To Sandbox>Default Box>Sandbox settings> Resource Access>File Access>Blocked Access

WARNING this currently only protects FireFox Passwords!
God that sucks....thats sandboxies only downfall.


(May 5, 2010 07:08 PM)-=C0d3ak=- Wrote:  i doubt that for some reason..
sandboxie wouldnt let it see anything i thought

Try it for yourself. =/



--------------------------------
Solved it!
I use VM too but sometimes I'm to lazy to turn it on lol.
you can prevent all files being opened you know so stealers cant open files...

i did this to internet too made 2 sandbox profiles 1 for internet 1 without so i run keygens in the sandbox that dont need internet and never get infected.. :D there can be restrictions for files,registry keys and internet etc
(May 6, 2010 01:53 AM)Xch4ng3 Wrote:  
Code
%Local AppData%\Mozilla\
%AppData%\Mozilla\
\Device\Mup\

Doesn't that just stop it accessing Mozilla's passwords?

Yup that works for me. I don't use IE so can't be bothered to write one lol
Meh I'll get off my ass and fix it in a few.
noob idea... but why not run/test all things inside a cloned/spare harddrive??? just a thought as im use 2 anyway... 1 is just storage for films only. hope i maight have helped you out a bit???
(May 23, 2010 09:49 AM)thetoad Wrote:  noob idea... but why not run/test all things inside a cloned/spare harddrive??? just a thought as im use 2 anyway... 1 is just storage for films only. hope i maight have helped you out a bit???

......Your spelling is noob.
(May 23, 2010 01:48 PM)tux1 Wrote:  But if you have blocked access to the internet won't that stop your passwords being compromised all together? When you say istealer runs through it do you mean it has like an local exploit for sandboxie?

No Sandboxie only blocks access to needed files like registry and such. IStealer can get the passwords because sandboxie does not protect them unless you tell it too..
i would rather use roboform
Well this Is pretty good mate, but If only the code Itself, went beyond Firefox passwords and had a broader range of protection.
Nonetheless, It's still good to know and have.

Cheers :)
(May 24, 2010 04:56 AM)mothered Wrote:  Well this Is pretty good mate, but If only the code Itself, went beyond Firefox passwords and had a broader range of protection.
Nonetheless, It's still good to know and have.

Cheers :)

I will most likely add more. Such as the more popular web browsers.
(May 24, 2010 05:00 AM)Riseing Wrote:  I will most likely add more. Such as the more popular web browsers.

No prob's there mate. I shall be periodically checking for the update.
Sounds great :)
Thanks buddy , i was wondering how my passwords were logged after using sandboxie too , i was testing it on my self.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by NietAug 23, 2023 05:08 AM 0 106 Aug 23, 2023 05:08 AM
Last Post: Niet
by PoLoWJul 13, 2014 10:49 AM 4 133 Jul 13, 2014 10:49 AM
Last Post: PoLoW
by abadguy87Feb 26, 2014 07:51 PM 3 117 Feb 26, 2014 07:51 PM
Last Post: Terry A. Davis