sandbox-escape

hardwear.io·31 min

• HARDWEAR
• Malware
• Date: 2025
• Location: Hardwear

Presenters detail vulnerability discovery and exploitation in bd-jb: Blu-ray Disc Java Sandbox Escape by Andy Nguyen | hardwear.io USA 2022.

nullcon·36 min

• NULLCON
• Malware
• Date: 2025
• Location: Nullcon

Engineers explore architecture and security mechanisms for The Great (Sandbox) Escape | Vikas Singh | NULLCON Webinar.

Black Hat Asia·36 min

• Black Hat
• Malware
• Date: 2024
• Location: Black Hat

Bohan Liu · Haibin Shi

Engineers explore architecture and security mechanisms for The Hole in Sandbox: Escape Modern Web-Based App Sandbox From Site-Isolation Perspective.

Hack In The Box Security Conference·39 min

• HITB
• Mobile
• Date: 2024
• Location: Hitb

Rani Idan

Rani Idan details #HITBGSEC 2018 D2: The Road To iOS Sandbox Escape.

Microsoft Israel R&D Center·46 min

• MICROSOFT
• Malware
• Date: 2024
• Location: Microsoft

Amy Burnett

Security researchers examine technical aspects of BlueHat IL 2020 - Amy Burnett - Forget the Sandbox Escape: Abusing Browsers from Code Execution.

Main Stage·35 min

• DEF CON
• AppSec
• Date: Aug 2023
• Location: Las Vegas

Austin Emmitt

Austin Emmitt demonstrates bypassing Apple's iOS 16 NSPredicate restrictions, achieving 100% reliable PAC bypasses and code execution in SpringBoard.

Hexacon·26 min

• HEXACON
• Malware
• Date: 2022
• Location: Hexacon

Industry experts analyze emerging threats surrounding 2022 - bd-jb: Blu-ray Disc Sandbox Escape by Andy Nguyen.

Main Stage·39 min

• DEF CON
• AppSec
• Date: Aug 2022
• Location: Las Vegas

Thijs Alkemade

Thijs Alkemade reveals how a single process injection vulnerability in macOS broke code signing, sandboxing, and Transparency Consent and Control (TCC).

App Sec Village·37 min

• DEF CON
• AppSec
• Date: Aug 2020
• Location: Online

Parsia Hakimian

Explores browser sandbox architecture and demonstrates localghost techniques for escaping client-side sandboxes.

Main Stage·31 min

• DEF CON
• Malware
• Date: Aug 2020
• Location: Online

Patrick Wardle

Patrick Wardle analyzes emerging macOS macro-based Office malware campaigns, dissecting Apple sandbox escapes and synthetic click persistence tricks.

Main Stage·18 min

• DEF CON
• Mobile
• Date: Aug 2018
• Location: Las Vegas

Zheng · Bai

Zheng and Bai presents fasten your seatbelts we are escaping ios 11 sandbox: Apple's sandbox was introduced as "SeatBelt" in macOS 10.5 which provided the first full-fledged implementation of the MACF policy.

Main Track 1·41 min

• DEF CON
• Blue Team
• Date: Aug 2017
• Location: Las Vegas

Itzik Kotler, Amit Klein

Cloud-based AV sandboxes can facilitate data exfiltration from high-security enterprise networks.

Main Stage·41 min

• DEF CON
• Red Team
• Date: Aug 2015
• Location: Las Vegas

Patrick Wardle

Patrick Wardle demonstrates achieving local root privilege escalation and sandbox escapes in OS X via named pipe vulnerabilities and root daemons.