Jul 10, 2015 08:08 PM
(This post was last modified: Sep 5, 2015 12:30 AM by IcYSeptember.)
I'm using this old thread of mine to post this, instead of making a new one.
At the time of posting this thread, I did find another security flaw, though it was a local privilege escalation, which couldn't be performed inside of Sandboxie itself.
I did find a few other various bugs and fun stuff, albeit not security related.
I have recently found multiple flaws, ranging from sandbox escape, to denial of service.
I have successfully:
Disabled Sandboxie entirely, entirely from within Sbie itself.
Executed an executable of my choosing outside of the Sandbox, from inside, using multiple separate methods.
Escalated privileges from user to SYSTEM abusing a flaw directly related to Sandboxie.
These methods are a bit more complex than the last. All but the privilege escalation are only affecting systems above XP (unless Sandboxie doesn't support XP, I'm not sure).
I will be posting a video some time tomorrow, I want to put the bypass and privilege bugs together first. (Day 3, at 3:30 AM EST of no sleep, so yeah)
These exploits do not require administrative privileges like the last.
One of the escape bugs, however, due to how it works, can take upwards of 1.5 minutes to occur (you'll understand why, as with the last one, PoC sources [c++] will be released after they are fixed).
At the time of posting this thread, I did find another security flaw, though it was a local privilege escalation, which couldn't be performed inside of Sandboxie itself.
I did find a few other various bugs and fun stuff, albeit not security related.
I have recently found multiple flaws, ranging from sandbox escape, to denial of service.
I have successfully:
Disabled Sandboxie entirely, entirely from within Sbie itself.
Executed an executable of my choosing outside of the Sandbox, from inside, using multiple separate methods.
Escalated privileges from user to SYSTEM abusing a flaw directly related to Sandboxie.
These methods are a bit more complex than the last. All but the privilege escalation are only affecting systems above XP (unless Sandboxie doesn't support XP, I'm not sure).
I will be posting a video some time tomorrow, I want to put the bypass and privilege bugs together first. (Day 3, at 3:30 AM EST of no sleep, so yeah)
These exploits do not require administrative privileges like the last.
One of the escape bugs, however, due to how it works, can take upwards of 1.5 minutes to occur (you'll understand why, as with the last one, PoC sources [c++] will be released after they are fixed).
![[Image: QiUbeYa.png]](https://i.imgur.com/QiUbeYa.png)
![[Image: a222be5dbcb244398ea00292c6154de7.png]](https://i.gyazo.com/a222be5dbcb244398ea00292c6154de7.png)
