Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

monitoring web pages for malicious iframes (root kits) without VM is not safe. when its possible to detect virtualization just by javascript, which software provide undetectable VMs ? QEMU is safe?

share|improve this question

closed as not a real question by rook, AJ Henderson, Jeff Ferland Apr 2 '13 at 16:45

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

JavaScript runs within a tightly controlled browser. There is no way of identifying detailed information about the environment that the browser is running on top of, unless of course you exploit the browser and obtain remote code execution. Even then it may be difficult to determine that you are running inside a virtual environment.

share|improve this answer
i just linked a working vm detector script in my question ... – w00dy Mar 30 '13 at 16:57
@w00dy most browsers do not support activex, and IE probably won't let this component run by default. Also it is trivial to spoof your mac address. – rook Mar 30 '13 at 20:40
there is too many ways to detect VM so maybe its better you suggest an undetectable virtual machine software instead of denying detection methods ... – w00dy Mar 31 '13 at 8:08
@w00dy not from within a sandbox... there is literally zero. – rook Mar 31 '13 at 20:53

Not the answer you're looking for? Browse other questions tagged or ask your own question.