Skip to content

PyBox is a sandboxing environment that allows you to sanitize and safely execute input commands from a userbase application such as an Online IDE,

License

Notifications You must be signed in to change notification settings

kounelictf/pybox

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

8 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

PYBOX

The general idea of PyBox is to provide a sanboxed area, that can execute user written code, through a feature such as an Online Code IDE. It was created to prevent the execution of Arbitary commands

pybox

How Does IT Work

PYBOX is designed to run, easily and portable. It works by first setting up an Python enviornment PyPy2. After the installation of packages and libraries are installed, Pybox sets up an confignured listening host. This is configured to the service you are using Pybox for. Upon user execution of the webbased tool or application, a request is sent from the server to Pybox, in a txt format. The code is sanitized and examined using a predefined list. If the code doesn't return any suspicious syntax, it is compiled. After compilation, the code is then sanitized again to detect any after post compilation activity. After this is done it is executed and monitored. If there is once again no suspcious activity, the print output is sent back the server and displayed to the user. If however the file does contain malicious code, it is logged, blacklisted and returns a Detection error, to the server.

About

PyBox is a sandboxing environment that allows you to sanitize and safely execute input commands from a userbase application such as an Online IDE,

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published