Wednesday, October 27, 2021

Understanding Network Access in Windows AppContainers

Posted by James Forshaw, Project Zero

Recently I’ve been delving into the inner workings of the Windows Firewall. This is interesting to me as it’s used to enforce various restrictions such as whether AppContainer sandboxed applications can access the network. Being able to bypass network restrictions in AppContainer sandboxes is interesting as it expands the attack surface available to the application, such as being able to access services on localhost, as well as granting access to intranet…

Read More

Latest news
Related news