Questions tagged [virtualization]

Virtualization is the creation of a virtual (rather than actual) version of something, such as an operating system, a server, a storage device or network resources.

Filter by
Sorted by
Tagged with
0
votes
0answers
5 views

Change Desktop Resolution for Kali Linux for once [migrated]

I am preparing for my OSCP exam and I have learned that it is best to use PWK Kali Image offered by the Offensive Security team. Since it is installed in a VMware Player, I can't take a snapshot of ...
0
votes
0answers
52 views

How to affect VMs in a network using WannaCry?(Cuckoo Sandbox)

I have a network consisting of 2 VMs(Windows 7). VM1:- 192.168.56.101 VM2:- 192.168.56.102 Both are connected to vboxnet0 (192.168.56.1). I infected VM1 using WannaCry ransomware but the ...
0
votes
0answers
4 views

Best practise to create virtual networks for CTF [migrated]

I've build a CTF server at home for me and my friends. By CTF server I mean a pretty decent server with quite OK specs on which XenServer (free version) is running, I download and mount a VM from ...
-1
votes
2answers
77 views

Keylogging host from virtual machine

Can a keylogger in a virtual machine (guest OS) capture keystrokes in host OS? Is there any way to do it?
3
votes
1answer
166 views

Program detecting sandboxie present - How to prevent?

I am having issues with a particular game, detecting the presence of the games being run inside sandboxie (An application for running programs inside a sandbox) with the goal of running multiple ...
-2
votes
1answer
95 views

Can I use a vm to learn hacking instead of vps? [closed]

I just began learning ethica hacking from The Hacker Playbook 3, and the author uses AWS an amazon VPS. Can I use a vm using VirtualBox and follow up with the book without problems? Will I be able to ...
1
vote
3answers
258 views

How can one using Tor and a Virtual Machine be traced?

Theoretically, wouldn't it be impossible to be traced using Tor + Virtual Machine? Assuming you connect to a website trying to track your personal location. Your IP address is completely hidden by ...
3
votes
2answers
174 views

How can a VM handle a compromised host?

How can I protect a VM build e.g. with LinuxKit, if my host system is compromised? Are there methods available or am I always at the host's mercy? And is it possible to isolate what's going on inside ...
1
vote
1answer
80 views

Gather system metrics securely from infected VM

I intend to train an RNN on snapshots of the VM metrics to classify malware. I will, therefore, run hundreds of different pieces of malware inside that VM. It has been isolated from my host (as best ...
0
votes
3answers
158 views

Is there any security benefit to using physical machines over VMs?

Consider a critical multi-server system (the clients are not in scope for this discussion). Each server can be a physical machine or hosted as VM. Is there any reason to believe that the physical ...
0
votes
0answers
25 views

Is it safe to run a malware on VirtualBox? [duplicate]

I have recently downloaded VirtualBox and I wanna test my malware. I have followed the tutorials but I'm not very sure about it. The things that I have changed are: Shared Folders set to Read on a ...
8
votes
1answer
672 views

How hard is it to distinguish between remote access to a virtual machine vs a piece of hardware?

Let's say I have full access to a remote machine (specifically, root on a Linux). What is the best method to check whether this is a real piece of hardware or a virtual machine? Most of the methods ...
0
votes
1answer
54 views

SSH Timed out problem [closed]

I can't connect to my kali linux ssh server running in Virtualbox through puTTY. I didn't make any changes to /etc/ssh/sshd_config file, besides Port and PermitRootLogin That's how i booted up my ssh ...
2
votes
0answers
56 views

VirtualBox & Spectre V4

I found the following ticket in the VirtualBox issue tracker: https://www.virtualbox.org/ticket/17987 The important (in the context of this question) part is that the guest OS (Debian) running in ...
1
vote
2answers
188 views

If I turn off Windows Defender Credential Manager off in Windows 10 so I can run a virtual machine in Virtual Box, is that a bad idea?

My processor is supposed to support virtualization: cpu.inf:5f63e534115a322c:IntelPPM_Inst.NT:10.0.17134.765:ACPI\GenuineIntel_-_Intel64 ACPI\GENUINEINTEL_-_INTEL64_FAMILY_6_MODEL_37_-_INTEL(R)_CORE(...
1
vote
0answers
50 views

Trusted Execution Environment Vs. Hypervisor or VMs: How are they related?

I am a newbie learning all about isolation and separation for securing applications and system software. In this regard, I was reading up on ARM TEE and how it is available on most Android phones to ...
0
votes
1answer
69 views

Key penetration from guest OS directly to hard drive

Most of the key protections are used to encrypt key to protect it from malware or other tenants. What if the hypervisor "steals" my key? If I am using a VM provided by a CSP, when I input a key to ...
-1
votes
1answer
69 views

How secure is virtualization against breaking out of the box [closed]

How secure are all currently used virtualization technologies (containers - BSD Jail, OpenVZ, Hypervisors - Hyper-V, KVM etc)? I heard about one vulnerability in VMware software, which lets you ...
0
votes
2answers
137 views

Security measures to take upon acquiring a new laptop?

I'm planning on buying a regular HP laptop. However, I'm still a novice when it comes to information security. I'm planning on using this laptop to SOLELY login to my bank accounts and NO OTHER ...
0
votes
1answer
194 views

Can I use a virtual machine to connect to a public WIFI to use Internet by totally isolating the host from it?

I want to use my laptop to connect to a public WiFi in a library but... I have strong security in my Windows host machine (comodo firewall using a public network settings and rules, protocols ...
0
votes
1answer
116 views

Is VM escape has the same severity as me getting in a car crash? [closed]

I'm exploring the threats for VDIs on VMware, based on the article it seems the risk for VM escape has low severity as described here:http://vmescape.com/index.html Did we forget the discussion of ...
0
votes
1answer
224 views

Is it safer to use Qubes with Whonix from Virtualbox than directly on the host computer?

I know it isn't advised to run Qubes-Whonix from Virtualbox due to performance issues, but other than that, is it safer? I.e. is it harder or easier to hack/infect Qubes-Whonix running from Virtualbox ...
2
votes
1answer
76 views

Verifying Host Sterility After Running Malware Tests on Virtual Machine

I know that "VM escape" is becoming a common issue now with malware testing. I'm just wondering if there's any way of verifying if the host system is clean from any infection after running a malware ...
0
votes
1answer
78 views

Virtualized or Container (Remote) Based Browser Isolation is more secure?

There obvious costs differences between them but I am not sure from a security perspective which of them considered to be more secure.
1
vote
4answers
110 views

The safest way to transfer files to an offline test environment

I'm wondering what the best tactic is to transfer dangerous files from an internet connected machine to an offline, separated from the web, virtual machine. Why should I do that? Because I want to ...
2
votes
0answers
94 views

What security isolation exists between VDI instance to VMware Horizon to ESX?

I read about malware that was able to escape the VM and get to the VMware Horizon host and then to hypervisor ESX, but I am not sure what security controls exist to prevent malware from jumping to ...
1
vote
0answers
62 views

How a browser isolation product is safer than our enterprise-hardened Chrome? [closed]

We have been offered a security product that provides browser isolation but I am not really sure what the benefits could be of such a solution in an enterprise.
0
votes
0answers
25 views

VirtualBox file sharing: is there a security difference between never having done it and having done it but now disabled it?

I'm thinking of getting started with VirtualBox but for security reasons I would like to keep file sharing off. However, there are certainly some files I'd like to transfer from host to guest. Would ...
0
votes
0answers
78 views

Secure way to sign virtualbox module for secure boot

I'm not sure if the Virtualbox version from the repository of my Linux distribution is already signed and works right away, but since it's not up-to-date I'm installing Virtualbox from the official ...
0
votes
0answers
91 views

Is VMWare workstation really safe? [duplicate]

I want to try to run some malwares in VMWare and I am a little bit afraid. Is it really safe? Is there any option that malware can get into my main PC?
2
votes
1answer
149 views

Isolate Virtual Machines on host-only adapter

I am performing malware analysis on VirtualBox. I want the VMs to only communicate with each other. Using host-only adapters, I have installed a Windows 7 VM (192.168.56.101) with the default gateway (...
0
votes
0answers
29 views

How much VirtualBox device/ios emulator/blueStacks informatin can be logged/tracked by servers/ apps?

This question is intended to know if we can be tricked by Virtual devices emulators. How much logging information can servers/apps request to tell the difference? In the other word, Can we hide our ...
0
votes
2answers
126 views

Securely compile foreign code and run it on a server?

I would like to set up a server that can receive source code directly, compile/interpret it and execute it. The code could be C#, Java, C++, C, Javascript, PHP... There will obviously be security ...
0
votes
1answer
63 views

Virtual machines vs separate physical machines for testing potential malware

If you have to run potentially insecure executables, would using a separate laptop have any security benefit compared to a virtual machine, or would it be worse in the sense that the machine's ...
0
votes
1answer
390 views

Android x86 vs Android on Qemu ARM

Situation: Emulating Android devices for pen-testing Problem: Choosing between emulating Android x86 or emulating Android on Qemu runing on ARM Question: In terms of vulnerabilities/exploitability, ...
2
votes
3answers
293 views

Malware Analysis

What would be a good approach for testing malware or bad url's from things picked up from my SIEM to validate them? I was told to setup a VM for these tests but don't want it to hit the internal ...
1
vote
1answer
121 views

What are the security trade offs between the different methods for encrypting a guest VM image?

The scenario is a lightly secured home or work PC used primarily for low-sensitive operations. For more secure activities a pre-built and restrictive virtual machine will be used. I'm mostly ...
53
votes
2answers
8k views

If a container is compromised does that mean host also compromised?

Recently, I have heard of a new virtualization tech called containers. Suppose the container has been compromised, does this mean the host is also compromised (since the container is a process on a ...
2
votes
1answer
369 views

Is Meltdown/Spectre mitigation necessary in virtual machine as well as in hypervisor? [duplicate]

I am running virtual machines in kvm/qemu hypervisor. The hypervisor has Meltdown/Spectre mitigation enabled in kernel. Is it necessary that virtual machines have the Meltdown/Spectre mitigation ...
0
votes
1answer
106 views

Why it best to do security testing on a copy on a Virtual Machine rather than on than the live server? [closed]

Why is it better for a security tester to take a copy of a server e.g. eBay server and test it on a virtual machine rather than on than the real eBay server? E.g. doing security testing on the live ...
-4
votes
1answer
219 views

How does testing on a Virtual Machine prevent the security tester from breaching the misuse act? [closed]

Why is it better for a security tester to test a virtual copy of a server e.g. eBay server and test it on a virtual machine rather than on the real eBay server? E.g. Doing security on the real server ...
1
vote
1answer
57 views

Is it possible to detect if a trojan or program sends information by sniffing the network of a VM

Explaining better, I was consulting on how I can ensure that the programs of an operating system does not perform any suspicious activity with my information, and I have been told that electronic ...
1
vote
1answer
278 views

Mitigation of Spectre and Meltdown affecting host OS from guest OS (Virtualbox)

I don't know all the details of Spectre and Meltdown, but the way I understand it is that they allow reading from memory, not writing to it. Also, I read that at least Spectre can get out of the ...
2
votes
1answer
110 views

What are some attacks to consider in a cloud deployment? [duplicate]

I want to discuss the following scenario: I use a cloud provider like Amazon where every instance of the OS is a VM. The hypervisor launches the VMs as needed. So let's assume there are two VMs ...
2
votes
1answer
175 views

In-memory encrypted Linux/unix kernel

Is there a variant of Linux kernel for virtualization that runs in-memory in a state that can't be read by the host operating system?
2
votes
0answers
367 views

Can an iPhone run two operating systems?

I'm looking for something similar to Virtualbox, but in iOS where each system would be isolated. The content in the virtual environment shouldn't be detectable by the host. (Not restricting answers to ...
0
votes
2answers
108 views

Risk of infecting the host OS if the guest OS is out of date [duplicate]

I'd like to know how much the risk changes if I don't update the software on the guest OS in a VM (applications and the guest operating system itself), compared to the risk in case it's all kept up-to-...
2
votes
1answer
111 views

Can government authorities retrieve data from LUKS volume when it's accessed while turned on? [duplicate]

I've heard that there are attacks that can get passwords out of RAM while turned on. If a server, CentOS 7.5 and LUKS enabled, it's tty1 locked, which is on a VMWare hypervisor that is locked with a ...
-1
votes
2answers
201 views

VPN Split Tunneling with VM safer?

I want to privately surf in a Virtual machine. I am questioning if it would be better/more private to use the Split Tunneling feature of my VPN Program (on the Host installed) and only allow my VM to ...
2
votes
2answers
184 views

Is it safe to run a potentially malicious ISO in a VM using VirtualBox? [duplicate]

I want to try out an OS called "Red Star OS". I want to make it a completely isolated VM, no network connectivity etc., just to explore and take a look at it. I found out where to get it from this ...