Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am interested what features VMWare uses to protect passwords inside the virtual machine.

share|improve this question

closed as not a real question by Iszi, AviD Apr 19 '12 at 18:13

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

What do you mean "inside the virtual machine"? Unless VMWare uses its own password-based authentication for some purposes, the hypervisor has neither control nor responsibility for passwords used on the guest systems. Please clarify your question. – Iszi Mar 15 '12 at 23:22
Does VMware have its own password-based authentication at all? If so, how does it protect those passwords when running its own virtual machine residing on its host computer? – Kevin Brehmer Mar 18 '12 at 6:29

It can't. The operating system hashes passwords and stores them somewhere on the disk image. Most operating systems use very weak password hashing schemes. Most notably the Microsoft world uses NTML or LM hashing scheme which can be broken with freely available rainbow tables.

share|improve this answer
On a side note, I have cracked a fair amount of XP passwords by brute forcing, and just entering the LM/NTML hashes on a site such as this . As for the question, VMWare doesn't take any extra precautions, that is the operating systems job. – cutrightjm Mar 16 '12 at 3:02

Not the answer you're looking for? Browse other questions tagged or ask your own question.