Understanding Network Access in Windows AppContainers

projectzero.google | blog | #exploit | #vulnerability | #security-research

Summary

.post-body{ul.lst-kix_w3t1hchiy4w5-6{list-style-type:none}ul.lst-kix_a73fbzj8zqo2-1{list-style-type:none}ul.lst-kix_w3t1hchiy4w5-5{list-style-type:none}ul.lst-kix_a73fbzj8zqo2-0{list-style-type:none}ul.lst-kix_w3t1hchiy4w5-4{list-style-type:none}ul.lst-kix_a73fbzj8zqo2-3{list-style-type:none}ul.lst-kix_w3t1hchiy4w5-3{list-style-type:none}ul.lst-kix_a73fbzj8zqo2-2{list-style-type:none}ul.lst-kix_a73fbzj8zqo2-5{list-style-type:none}ul.lst-kix_a73fbzj8zqo2-4{list-style-type:none}ul.lst-kix_w3t1hchiy4w5-8{list-style-type:none}ul.lst-kix_a73fbzj8zqo2-7{list-style-type:none}ul.lst-kix_w3t1hchiy4w5-7{list-style-type:none}ul.lst-kix_a73fbzj8zqo2-6{list-style-type:none}ul.lst-kix_a73fbzj8zqo2-8{list-style-type:none}ul.lst-kix_w3t1hchiy4w5-2{list-style-type:none}ul.lst-kix_w3t1hchiy4w5-1{list-style-type:none}ul.lst-kix_w3t1hchiy4w5-0{list-style-type:none}.lst-kix_9fia5rt9e6y-4>li:before{content:"\0025cb "}.lst-kix_9fia5rt9e6y-6>li:before{content:"\0025cf "}.lst-kix_w3t1hchiy4w5-2>li:before{content:"\0025a0 "}.lst-kix_9fia5rt9e6y-3>li:before{content:"\0025cf "}.lst-kix_9fia5rt9e6y-7>li:before{content:"\0025cb "}.lst-kix_w3t1hchiy4w5-3>li:before{content:"\0025cf "}.lst-kix_a73fbzj8zqo2-6>li:before{content:"\0025cf "}.lst-kix_9fia5rt9e6y-0>li:before{content:"\0025cf "}.lst-kix_9fia5rt9e6y-2>li:before{content:"\0025a0 "}.lst-kix_9fia5rt9e6y-8>li:before{content:"\0025a0 "}.lst-kix_w3t1hchiy4w5-4>li:before{content:"\0025cb "}.lst-kix_a73fbzj8zqo2-5>li:before{content:"\0025a0 "}.lst-kix_9fia5rt9e6y-1>li:before{content:"\0025cb "}.lst-kix_w3t1hchiy4w5-5>li:before{content:"\0025a0 "}.lst-kix_w3t1hchiy4w5-7>li:before{content:"\0025cb "}.lst-kix_a73fbzj8zqo2-2>li:before{content:"\0025a0 "}.lst-kix_a73fbzj8zqo2-4>li:before{content:"\0025cb "}.lst-kix_w3t1hchiy4w5-6>li:before{content:"\0025cf "}.lst-kix_a73fbzj8zqo2-3>li:before{content:"\0025cf "}.lst-kix_a73fbzj8zqo2-0>li:before{content:"\0025cf "}.lst-kix_w3t1hchiy4w5-8>li:before{content:"\0025a0 "}.lst-kix_a73fbzj8zqo2-1>li:before{content:"\0025cb "}.lst-kix_9fia5rt9e6y-5>li:before{content:"\0025a0 "}ul.lst-kix_uwx5zr9ju08v-8{list-style-type:none}.lst-kix_a73fbzj8zqo2-7>li:before{content:"\0025cb "}ul.lst-kix_uwx5zr9ju08v-3{list-style-type:none}ul.lst-kix_uwx5zr9ju08v-2{list-style-type:none}ul.lst-kix_uwx5zr9ju08v-1{list-style-type:none}ul.lst-kix_uwx5zr9ju08v-0{list-style-type:none}.lst-kix_w3t1hchiy4w5-1>li:before{content:"\0025cb "}.lst-kix_a73fbzj8zqo2-8>li:before{content:"\0025a0 "}ul.lst-kix_uwx5zr9ju08v-7{list-style-type:none}ul.lst-kix_uwx5zr9ju08v-6{list-style-type:none}ul.lst-kix_uwx5zr9ju08v-5{list-style-type:none}ul.lst-kix_uwx5zr9ju08v-4{list-style-type:none}.lst-kix_w3t1hchiy4w5-0>li:before{content:"\0025cf "}.lst-kix_uwx5zr9ju08v-7>li:before{content:"\0025cb "}.lst-kix_uwx5zr9ju08v-6>li:before{content:"\0025cf "}.lst-kix_uwx5zr9ju08v-8>li:before{content:"\0025a0 "}.lst-kix_uwx5zr9ju08v-5>li:before{content:"\0025a0 "}ul.lst-kix_9fia5rt9e6y-0{list-style-type:none}ul.lst-kix_9fia5rt9e6y-1{list-style-type:none}ul.lst-kix_9fia5rt9e6y-2{list-style-type:none}ul.lst-kix_9fia5rt9e6y-3{list-style-type:none}ul.lst-kix_9fia5rt9e6y-4{list-style-type:none}ul.lst-kix_9fia5rt9e6y-5{list-style-type:none}li.li-bullet-0:before{margin-left:-18pt;white-space:nowrap;display:inline-block;min-width:18pt}ul.lst-kix_9fia5rt9e6y-6{list-style-type:none}ul.lst-kix_9fia5rt9e6y-7{list-style-type:none}ul.lst-kix_9fia5rt9e6y-8{list-style-type:none}.lst-kix_uwx5zr9ju08v-0>li:before{content:"\0025cf "}.lst-kix_uwx5zr9ju08v-1>li:before{content:"\0025cb "}.lst-kix_uwx5zr9ju08v-3>li:before{content:"\0025cf "}.lst-kix_uwx5zr9ju08v-2>li:before{content:"\0025a0 "}.lst-kix_uwx5zr9ju08v-4>li:before{content:"\0025cb "}ol{margin:0;padding:0}table td,table th{padding:0}.c19{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#000000;border-top-width:1pt;border-right-width:1pt;border-left-color:#000000;vertical-align:top;border-right-color:#000000;border-left-width:1pt;border-top-style:solid;background-color:#012356;border-left-style:solid;border-bottom-width:1pt;width:468pt;border-top-color:#000000;border-bottom-style:solid}.c40{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#000000;border-top-width:1pt;border-right-width:1pt;border-left-color:#000000;vertical-align:top;border-right-color:#000000;border-left-width:1pt;border-top-style:solid;border-left-style:solid;border-bottom-width:1pt;width:468pt;border-top-color:#000000;border-bottom-style:solid}.c6{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#000000;border-top-width:1pt;border-right-width:1pt;border-left-color:#000000;vertical-align:top;border-right-color:#000000;border-left-width:1pt;border-top-style:solid;border-left-style:solid;border-bottom-width:1pt;width:249.8pt;border-top-color:#000000;border-bottom-style:solid}.c30{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#000000;border-top-width:1pt;border-right-width:1pt;border-left-color:#000000;vertical-align:top;border-right-color:#000000;border-left-width:1pt;border-top-style:solid;border-left-style:solid;border-bottom-width:1pt;width:247.5pt;border-top-color:#000000;border-bottom-style:solid}.c15{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#000000;border-top-width:1pt;border-right-width:1pt;border-left-color:#000000;vertical-align:top;border-right-color:#000000;border-left-width:1pt;border-top-style:solid;border-left-style:solid;border-bottom-width:1pt;width:218.2pt;border-top-color:#000000;border-bottom-style:solid}.c28{border-right-style:solid;padding:5pt 5pt 5pt 5pt;border-bottom-color:#000000;border-top-width:1pt;border-right-width:1pt;border-left-color:#000000;vertical-align:top;border-right-color:#000000;border-left-width:1pt;border-top-style:solid;border-left-style:solid;border-bottom-width:1pt;width:220.5pt;border-top-color:#000000;border-bottom-style:solid}.c9{background-color:#ffffff;color:#171717;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:10.5pt;font-family:"Arial";font-style:normal}.c35{background-color:#ffe599;color:#171717;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:"Courier New";font-style:normal}.c39{background-color:#d9ead3;color:#171717;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:"Courier New";font-style:normal}.c24{background-color:#f9cb9c;color:#171717;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:"Courier New";font-style:normal}.c31{background-color:#f6b26b;color:#171717;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:"Courier New";font-style:normal}.c3{padding-top:0pt;padding-bottom:0pt;line-height:1.5;orphans:2;widows:2;text-align:left;height:11pt}.c20{color:#f4cccc;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:"Courier New";font-style:normal}.c5{color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:10pt;font-family:"Arial";font-style:normal}.c33{padding-top:16pt;padding-bottom:4pt;line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}.c26{padding-top:18pt;padding-bottom:6pt;line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}.c25{color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:16pt;font-family:"Arial";font-style:normal}.c2{color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:"Arial";font-style:normal}.c8{color:#ffff00;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:"Courier New";font-style:normal}.c16{color:#434343;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:14pt;font-family:"Arial";font-style:normal}.c18{color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:"Courier New";font-style:normal}.c0{color:#efefef;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:"Courier New";font-style:normal}.c34{color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:"Arial"}.c22{color:#000000;font-weight:700;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:"Arial"}.c4{padding-top:0pt;padding-bottom:0pt;line-height:1.5;orphans:2;widows:2;text-align:left}.c10{border-spacing:0;border-collapse:collapse;margin-right:auto}.c13{text-decoration-skip-ink:none;-webkit-text-decoration-skip:none;color:#1155cc;text-decoration:underline}.c1{padding-top:0pt;padding-bottom:0pt;line-height:1.0;text-align:left}.c38{background-color:#ffffff;max-width:468pt;padding:72pt 72pt 72pt 72pt}.c32{background-color:#ffffff;font-size:10.5pt;color:#171717}.c14{font-family:"Courier New";color:#efefef;font-weight:400}.c23{font-family:"Courier New";color:#ffff00;font-weight:400}.c27{border:1px solid black;margin:5px}.c17{padding:0;margin:0}.c11{color:inherit;text-decoration:inherit}.c29{margin-left:36pt;padding-left:0pt}.c37{background-color:#ff9900}.c12{height:0pt}.c36{background-color:#ff0000}.c21{height:11pt}.c7{font-style:italic}.title{padding-top:0pt;color:#000000;font-size:26pt;padding-bottom:3pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}.subtitle{padding-top:0pt;color:#666666;font-size:15pt;padding-bottom:16pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}li{color:#000000;font-size:11pt;font-family:"Arial"}p{margin:0;color:#000000;font-size:11pt;font-family:"Arial"}h1{padding-top:20pt;color:#000000;font-size:20pt;padding-bottom:6pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}h2{padding-top:18pt;color:#000000;font-size:16pt;padding-bottom:6pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}h3{padding-top:16pt;color:#434343;font-size:14pt;padding-bottom:4pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}h4{padding-top:14pt;color:#666666;font-size:12pt;padding-bottom:4pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}h5{padding-top:12pt;color:#666666;font-size:11pt;padding-bottom:4pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;orphans:2;widows:2;text-align:left}h6{padding-top:12pt;color:#666666;font-size:11pt;padding-bottom:4pt;font-family:"Arial";line-height:1.5;page-break-after:avoid;font-style:italic;orphans:2;widows:2;text-align:left}} Posted by James Forshaw, Project ZeroRecently I've been delving into the inner workings of the Windows Firewall. This is interesting to me as it's used to enforce various restrictions such as whether AppContainer sandboxed applications can access the network. Being able to bypass network restrictions in AppContainer sandboxes is interesting as it expands the attack surface available to the application, such as being able to access services on localhost, as well as granting access to intranet resources in an Enterprise.

Published: 2021-08-19 00:00
Collected: 2026-09-22 23:21

original ↗

Related coverage

back