Skip to main content

Questions tagged [virtualbox]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
28 views

Nmap can't scan ip outside my network [closed]

I am new to cyber security and networking and would like to ask, I installed on my virtual machine Kali Linux and in the settings enabled a bridged connection instead of NAT, but when a friend sent me ...
Snaks's user avatar
  • 1
0 votes
0 answers
96 views

Cannot exploit Metasploitable 2 VM using Tomcat 5.5 on Metasploit with Parrot OS

I've being trying to perform a simple exploit with msfconsole on Metasploitable 2 without any results. I'm using a host-only network adapter with DHCP enabled so I'm getting 192.168.56.104 on the ...
Martin Montas's user avatar
0 votes
0 answers
46 views

UNC Path Injection Testing over NAT

I am penetration tester. I am struggling to check for UNC path injections in the web apps because of the environment that I am in. I am conducting a pentest of a web app in my company's local network. ...
aXXo's user avatar
  • 1
1 vote
1 answer
318 views

PCR 7 in TPM 2.0 has always the same value

First of all, I must say that I'm using a VM with an emulated TPM 2.0. I've created an LUKS2 encrypted partition and configured the TPM 2.0 to unseal the key only if the PCR 7 has a certain value. For ...
Blasco's user avatar
  • 11
0 votes
1 answer
327 views

How to transfer files from a virtual machine to the host without risking getting infected?

I have to transfer some files such as movies, TV series and other large stuff (so I can not to use a cloud) from a virtual machine to the host. I read that an infected virtual machine can spread ...
woyim46107's user avatar
0 votes
0 answers
67 views

Can guest access host clipboard despite sharing turned off?

Host: Win10 Guest: Linux Software: VirtualBox Clipboard information might not seem important, but it could very well contain a copied password or other useful data. On the host, clipboard history is ...
No Name's user avatar
  • 217
0 votes
1 answer
333 views

How to know if you have downloaded a malware on a virtual machine [duplicate]

First, I'm a complete beginner, my only experience in malware is running windows defender lol. But I will try my best to learn anything that you guys recommend. My younger brother keeps downloading ...
you dont need to know this's user avatar
13 votes
4 answers
5k views

How can data from VirtualBox leak to the host and how to avoid it?

I used a virtual machine (Windows host/Linux mint guest) to store some very sensitive and private data (it shouldn't be uncovered by state-level actors). Today I decided to check how much deleted ...
Sonozaki's user avatar
  • 157
0 votes
1 answer
540 views

What is a safer Linux installation mode: dualboot or virtual machine?

Which Linux installation method on system running Windows 11 on bare metal (host OS) is safer? (e.g. for online banking). dual-boot Windows 11 as the host and Linux in a Virtual Box. Dual-boot: is ...
TauCeti's user avatar
1 vote
2 answers
341 views

VM escape using Whonix Gateway and another Linux distro as workstation?

Using VirtualBox is it possible for VM escape to happen while using Whonix Gateway to connect to TOR and then use another VM with, let's say, Ubuntu (that uses Whonix instead of directly using the ...
Matheus's user avatar
  • 123
1 vote
3 answers
258 views

What is better for security when using virtualbox?

I have a virtual machine running on Virtualbox on my host OS. I want to make sure that my host PC is as safe from outside threats as possible. When using an ISO live image as the virtual machine, ...
Rideboards's user avatar
1 vote
1 answer
683 views

How can I test the BlueKeep exploit?

I want to do the BlueKeep exploit, but I want to do it legally. I know how to do the exploit, I am just trying to figure out how to set up something that is vulnerable to BlueKeep. How can I ...
TheRealTengri's user avatar
3 votes
3 answers
441 views

Is it possible for a malware in a VM to be still running after the VM is shut down?

Let's say that VMWare or VirtualBox is running the newest version of Debian. I'm not sure if it's possible for any program in the guest to continue running, stealing data from the host, even after the ...
No Name's user avatar
  • 217
0 votes
1 answer
195 views

Using PDF files from dubious sources

In one of my university courses, the lecture materials (solutions to homework assignments) are not fully supplied by the university itself, but have to be created by the students themselves: The ...
auto_driving_q's user avatar
0 votes
1 answer
301 views

What are the best security practices when when using VirtualBox on Windows 11 with an old OS?

Got a cheap new laptop to play old games with a VM of Windows XP/7, with the host being Windows 11. Using a WiFi that isn't my own (as I don't plan on connecting to the internet with this laptop) I ...
larld's user avatar
  • 1
3 votes
0 answers
3k views

When using VirtualBox, is it better to use the VirtualBox encryption or the OS disk encryption?

VirtualBox has an option to encrypt the drive of a VM. When I installed Debian or Ubuntu, I have the option to say that I want the full disk encrypted. I'm thinking that both do pretty much the same ...
Alexis Wilke's user avatar
  • 1,017
1 vote
2 answers
843 views

How do I activate a malware inside a virtual machine?

I have been doing research on malware detection and my current setup is: one host OS (Ubuntu 18.04) and one guest OS (Ubuntu 18.04) inside VirtualBox. I have downloaded and executed some malware (...
Maksudur Rahman's user avatar
0 votes
2 answers
355 views

can virtualbox be used to access a locked website without being tracked and without getting detected of using a virtual machine?

I need to open a website where access is denied in my country. I would like to know if virtualbox can be used to solve this issue. my concern is if they can detect that I am using a virtual machine. ...
Marwan Maalouf's user avatar
1 vote
1 answer
385 views

setting up a lab in virtualbox for different tasks: local net testing & vulnerable virtual network

I have seen several tutorials about setting up Virtualbox networks for Kali & vulnerable machines together using the option Internal network, but I have several questions regarding other ...
Aurelie Navir's user avatar
0 votes
1 answer
290 views

How to find discrepancy between exploitable and unexploitable VM

For several years, I have been setting up VMs with 2-3 year old versions of Windows as well as some additional applications to demonstrate two-stage exploits using Metasploit for educational purposes (...
Andreas Unterweger's user avatar
0 votes
0 answers
60 views

How to protect workload from host [duplicate]

I have some code and other resources which run in a container or VM ("black box") on a host machine. The host uses this as a service to process some files which are highly sensitive and ...
Alex's user avatar
  • 109
0 votes
1 answer
211 views

Can I detect malware that’s on my host OS if I’m using diagnostic tools in a VM?

If I have a VirtualBox VM running Kali Linux, can I use its diagnostic tools to search for malware on the host?
MrHotShot's user avatar
1 vote
1 answer
798 views

Do I need strong user password for an encrypted VM?

I've just imported Whonix VirtualBox VM, and have encrypted its drive via VirtualBox settings. Now when I booted it, the default credentials are "user/changeme", and setup suggests I change ...
Uprooted's user avatar
  • 121
1 vote
0 answers
282 views

VirtualBox: Making a Keylogger file from Kali VM after exploiting Metasploitable (Bridged Adapter) [closed]

I am fairly new to Kali Linux and Metasploitable and I am trying to set a keylogger for when I gain root access to Metasploitable. I have gained root access by using the use exploit/unix/irc/...
dwayne_d11's user avatar
0 votes
1 answer
422 views

Can you encrypt your host machine, while inside an emulated virtual machine?

When you are completely inside the VM, can you have your host machine in which the VM resides be encrypted while running the VM? Say for example: Ubuntu(host machine): -> runs VM(Arch) Can Ubuntu ...
User0x01's user avatar
2 votes
0 answers
308 views

Security implications of automatic signing of kernel modules on Debian/Ubuntu (like VirtualBox does)

In the past, to install VirtualBox on Debian/Ubuntu you needed to sign some kernel modules, otherwise it would not work. The process involved creating a key pair, importing the public key as a MOK (...
reed's user avatar
  • 15.8k