Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Security
Video Reviews - Security and Privacy
Comodo FW bypass malware the sandbox (sandbox hips off + on) and voodooshield (autopilot)
Message
<blockquote data-quote="SHvFl" data-source="post: 560236" data-attributes="member: 30916"><p>Whatever happened with trust list and if the malware run outside of sandbox the only sure thing is that this is not a Comodo sandbox bypass. You can call it a Comodo bypass if you wish but not a sandbox bypass. For a sandbox bypass to happen the application needs to start in the sandbox and find a way to escape.</p><p></p><p>Now about VS bypass that was not a bypass either. You can call it a flaw in default settings because it allows by parent process but still the setting has it's purpose and anyone with the paid option can change it. Also the tester selected protection level(not default) is weak on certain occasion like the one that was shown here.</p></blockquote><p></p>
[QUOTE="SHvFl, post: 560236, member: 30916"] Whatever happened with trust list and if the malware run outside of sandbox the only sure thing is that this is not a Comodo sandbox bypass. You can call it a Comodo bypass if you wish but not a sandbox bypass. For a sandbox bypass to happen the application needs to start in the sandbox and find a way to escape. Now about VS bypass that was not a bypass either. You can call it a flaw in default settings because it allows by parent process but still the setting has it's purpose and anyone with the paid option can change it. Also the tester selected protection level(not default) is weak on certain occasion like the one that was shown here. [/QUOTE]
Insert quotes…
Verification
Post reply
Top