{"id":4287,"date":"2017-08-03T01:12:50","date_gmt":"2017-08-03T01:12:50","guid":{"rendered":"http:\/\/www.hexacorn.com\/blog\/?p=4287"},"modified":"2017-08-22T22:58:01","modified_gmt":"2017-08-22T22:58:01","slug":"enter-sandbox-special-edition","status":"publish","type":"post","link":"https:\/\/www.hexacorn.com\/blog\/2017\/08\/03\/enter-sandbox-special-edition\/","title":{"rendered":"Enter Sandbox: Special edition"},"content":{"rendered":"

I recently wrote Cyber version of Orgasmatron<\/a>. Writing one for Metallica’s Enter Sandman<\/a> was on my mind for much longer since it’s almost impossible not to think of it when you read the title of this series<\/a>… So… here it is:<\/p>\n

Enter Sandbox<\/strong><\/p>\n

QEMU, VMWare
\nDon’t forget the Xen
\nAnd Sandboxie’s there<\/p>\n

Virtual Box, Cuckoo rocks
\nParallels’s in stock
\nTill the Sandbox he comes<\/p>\n

Sleep is nopped and faster
\nCursor is moving too<\/p>\n

Exit: Threads
\nEnter: Creds
\nFakenet snoops
\nWhile we patch the stalling loops<\/p>\n

Something’s wrong, freeze the guest
\nHeavy loaded host
\nAnd it’s not doing its best<\/p>\n

Mining coins, WannaCry
\nVirus spreads like fire
\nAnd the Pafish will bite<\/p>\n

Sleep is nopped and faster
\nCursor is moving too<\/p>\n

Exit: Threads
\nEnter: Creds
\nFakenet snoops
\nWhile we patch the stalling loops<\/p>\n

Now I call the function Sleep
\nTime Stamp Counter I will keep
\nIf I delta some of it
\nNumbers bad? It’s time to quit<\/p>\n

Hash the file, and check the strings
\nAnd never mind that noise you see
\nIt’s just the fake I, O and C
\nIn your report, for VP<\/p>\n

Exit: Threads
\nEnter: Creds
\nCalling rand()<\/p>\n

Exit: Threads
\nEnter: Creds
\nFakenet snoops
\nWhile we patch the stalling loops<\/p>\n","protected":false},"excerpt":{"rendered":"

I recently wrote Cyber version of Orgasmatron. Writing one for Metallica’s Enter Sandman was on my mind for much longer since it’s almost impossible not to think of it when you read the title of this series… So… here it … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[41,18],"tags":[],"_links":{"self":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/4287"}],"collection":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/comments?post=4287"}],"version-history":[{"count":8,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/4287\/revisions"}],"predecessor-version":[{"id":4302,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/4287\/revisions\/4302"}],"wp:attachment":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/media?parent=4287"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/categories?post=4287"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/tags?post=4287"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}