A Database of Malware (in Minecraft)
Source: YouTube · John Hammond · published Nov 6, 2026 · 26:00
A security researcher's Minecraft mod turns internet open-directory files into in-game mobs, and this session focuses on deploying MWDB as persistent "HQ" storage for collected samples 0:00-0:32.
Key Takeaways:
• The team proves in-game control of a sandbox VM via Codex, downloading real samples (reverse shells, webshells) into an intake folder—after fixing annoying repeated credential prompts 5:01-8:20.
• MWDB is chosen as backend: SHA-256 organization, tags, relationships, web UI, and REST API; architecture keeps it as persistent HQ via Docker Compose outside the disposable sandbox VM 9:24-11:01.
• The pipeline succeeds end-to-end—real samples, including someone's bash history with an exposed API key, land in MWDB—but the in-game download feature breaks late in the session 19:00-20:50.
• Chat-suggested gamification ideas (carrying mobs, throwing projectiles to capture files) emerge, with handoffs set for improving the endpoint agent and adding in-game MWDB indicators 16:49-17:36.
Two steps forward, one step back: MWDB is deployed and fed real samples, but the sandbox download regression leaves clear work for next stream 25:12-25:21.
Sources:
- 0:00-0:32 Project intro and MWDB goal
- 5:01-8:20 VM control and first sample download
- 9:24-11:01 MWDB features and architecture decision
- 16:49-17:36 Gamification ideas and handoffs
- 19:00-20:50 Sample ingestion into MWDB
- 25:12-25:21 Wrap-up and regressions
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Malware Analysis. Commonly maps to: Security Operations, Security Architecture and Engineering. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
I spent a whole weekend live streaming for over 12 hours using AI to build a Minecraft mod that lets us walk around open directories on the internet inside the game. It's all for cyber security research. It's been a lot of vibe coding, but live chat and I came up with a working mod that talks to the hunt.io IO API shows files as mobs and creatures that walk around and lets us view and download them into the start of our malware analysis sandbox. In this video, I want to make that process cleaner by setting up MWDB, a malware database. Codex has been driving some funny, hilarious developments to be able to read open directories that are on the internet that are serving potential malware, exploit codes, proof of concept payloads, um, CVE bugs, funny, hilarious nonsense. What we've been doing…