John Hammond Prototypes a Minecraft-Based Security Research Sandbox
· 34:30 · Watch on YouTube ↗
Summary
A live stream develops a Minecraft security research interface, progressing from open-directory metadata browsing to a local VMware VM sandbox and a proposed guest-agent control plane for analyzing downloaded files.
Key points
- The mod turns open-directory host and file metadata from Hunt[.]io into an explorable Minecraft environment; files appear as passive mobs and folders as grouped areas.
- The prototype adds a file-content viewer with scrolling, line numbers, syntax coloring and metadata-only previews for unsupported binary files.
- To contain downloaded files, the developer chooses a local VMware Workstation VM rather than cloud-hosted infrastructure; only explicitly allowlisted VMs are to be manageable.
- The VM-management proof of concept can start and stop a VM and create snapshots. Screenshot capture required guest credentials and VMware Tools running in the guest.
- The discussion favors keeping credential values out of YAML configuration and handling secrets through environment-variable names.
- A future control plane is planned: a Java HTTP server in the mod and a lightweight guest agent for near-real-time jobs. File downloads and command execution are planned, not shown as completed.
Article Details
- Topics
- [00:02] Minecraft mod concept for cybersecurity research using open directories
- [05:26] Sandbox design tradeoffs between local virtual machines and online services
- [11:00] Local VM management in Minecraft and allowlisting permitted VMs
- [21:15] Testing VM operations, screenshots and guest credential requirements
- [25:02] Planning the sandbox control agent and file-transfer capabilities
- [30:16] Proposed guest-agent control plane, command execution and API-key handling