Back to General and Gameplay Programming

Programming a container for executables?

General and Gameplay Programming Programming

Started by The Batfrog February 08, 2012 02:31 AM

10 comments, last by the_edd 12 years, 2 months ago

The Batfrog

100

Author

February 08, 2012 02:31 AM

Hi.

I wish to create a program that will run an executable, and then act as a container for that running executable.
My program should be able to pass the executable fake system information, such as "System Time", and block it from any internet access.
I am working with C# under windows.

What is the best method to accomplish this? Is there a name for programs that do this?

Thankyou for your time, forum-ers!

swiftcoder

18,997

February 08, 2012 03:43 AM

Is there a name for programs that do this?

Broadly speaking it's a form of sandbox.

Tristam MacDonald. Ex-BigTech Software Engineer. Future farmer. [https://trist.am]

The Batfrog

100

Author

February 08, 2012 04:43 AM

[quote name='The Batfrog' timestamp='1328668282' post='4910738']
Is there a name for programs that do this?

Broadly speaking it's a form of sandbox.
[/quote]

Ah! That looks like it!

I'll do some general research on creating sandboxes.
Any ideas on how to implement a sandbox with network access restriction and system information spoofing?
Would the "AppDomain" class be of any help?

ApochPiQ

23,138

February 08, 2012 05:22 AM

Are we talking about arbitrary applications, or just one specific one?

Wielder of the Sacred Wands
[Work - ArenaNet] [Epoch Language] [Scribblings]

The Batfrog

100

Author

February 08, 2012 05:29 AM

Are we talking about arbitrary applications, or just one specific one?

Arbitrary.

Washu

7,836

February 08, 2012 06:18 AM

[quote name='ApochPiQ' timestamp='1328678556' post='4910784']
Are we talking about arbitrary applications, or just one specific one?

Arbitrary.
[/quote]
Then what you want is called a "virtual machine"

In time the project grows, the ignorance of its devs it shows, with many a convoluted function, it plunges into deep compunction, the price of failure is high, Washu's mirth is nigh.

The Batfrog

100

Author

February 08, 2012 06:36 AM

Then what you want is called a "virtual machine"

Thankyou

However, I feel as though using a virtual machine would be unnecessarily computationally expensive, as it would involve running an entire operating system inside the VM.

I imagine there must be a lighter alternative by running the executable through a simpler sandbox, and intercepting kernel API calls such as GetSystemTime.
Is this at all possible?

gekko

479

February 08, 2012 07:46 AM

Can you just hook the Win32 API calls using Detours (or you could do the same thing yourself)?

-- gekko

The Batfrog

100

Author

February 08, 2012 08:49 AM

Can you just hook the Win32 API calls using Detours (or you could do the same thing yourself)?

This 'hooking' looks like exactly what I'm trying to do! YAY!

A couple of questions:

Is hooking Win32 API calls with my own code (without Detours) relatively easy?
What's the best way to block network access to a sandboxed executable?

Katie

2,255

February 08, 2012 08:52 AM

"best"?

Run it on a machine with no network connection.... obviously.

But could we just back up slightly -- why do you want to do this?

Programming a container for executables?

This topic is closed to new replies.

Popular Topics

Recommended Tutorials

Programming a container for executables?

This topic is closed to new replies.

Popular Topics

Recommended Tutorials

Reticulating splines