Questions tagged [virtualization]

Virtualization is the creation of a virtual (rather than actual) version of something, such as an operating system, a server, a storage device or network resources.

Filter by
Sorted by
Tagged with
1
vote
0answers
34 views

Rebooted host machine from inside VM, should I report this issue and where to report?

Excuse my ignorance as I don't work in infosec. I ran reboot inside a linux virtual machine using VirtualBox on Mac and it rebooted my host machine. I am trying to reproduce the problem but haven't ...
0
votes
1answer
51 views

How to configure a VM to protect all my hardware fingerprint from guest OS and softwares?

This question was originally Does Firefox in VM have a common enough fingerprint so I don't need tor browser? in Tor community. I want to know about what a web browser's fingerprint like in a VM, ...
0
votes
2answers
112 views

Is using virtualbox for web browsing worth it for added security?

My host machine is running Windows 10. I've installed VirtualBox and use it to run an Ubuntu VM. Inside the VM I use Firefox to do all of my web browsing that doesn't involve entering sensitive data ...
27
votes
4answers
4k views

Why can hardware assisted virtualization be a security issue?

Avast antivirus has an option for disabling "Enable hardware-assisted virtualization". If it's enabled, how is it a security issue?
1
vote
1answer
82 views

Alternative to Qubes OS network domain for a server

I know that Qubes Os is not suitable for a server use, but some of its features are quite interesting for that. In fact, all the network drivers are contained in a VM that run a different Linux based ...
2
votes
1answer
83 views

Does Docker affect the quality of cryptographic operations?

Is running cryptographic operations (encryption / decryption / signing / verifying / key-exchange / key-generation) in a Docker container affecting the quality of the crypto or entropy? If it does ...
1
vote
1answer
122 views

How Concerned should I be about VM Escapes?

I intend to start learning how to do malware analysis and forensics, but I have a concern or two. I want to start by just analysing code that I write myself, and that'll be fine. But at some point I'...
1
vote
1answer
49 views

Running virus from real folder in Sandboxie

What if I download a virus to my real folder but only execute it in Sandboxie, is it less secure that if I download it directly from SB?
1
vote
1answer
71 views

Is a VPN and Virtual Machine secure enough for running programs that might include malware [duplicate]

I am trying to start a business online but don't want viruses from any sketchy software that I will be downloading. I will be using a VM and a VPN but was wondering if I needed any other software so ...
3
votes
1answer
142 views

Nmap giving different result between Mac OS scan and Linux (Kali) scan [closed]

I try to do a simple TCP scan on an Kubunt VM (is on VirtualBox), from two different OS. From the Host (Mac OS system) and from a Kali Linux VM (tried VirtualBox and Parallels also). Kali Linux (...
3
votes
0answers
83 views

Security issues in QEMU [closed]

My intention is to add support in QEMU for a new machine/platform. I just started this project, so I can't say more details about it because I don't know them. My question is related about the ...
2
votes
0answers
39 views

Safe Bash Emulation - using chroot and qemu

I am trying to run a bash script in a sandbox to gain information about what it launches. There don't appear to be good emulators or static analysis tools for it, so I was going to run it in a chroot, ...
1
vote
0answers
43 views

Suppose you have a simple host running Virtualbox with NAT networking and do malware testing on it, how safe are you? [duplicate]

So, just a single windows host attached to the router and a virtual machine running on it. No shared folders or clipboard. Just testing your average malware. Note that this question talks about just ...
1
vote
0answers
57 views

How to affect VMs in a network using WannaCry?(Cuckoo Sandbox)

I have a network consisting of 2 VMs(Windows 7). VM1:- 192.168.56.101 VM2:- 192.168.56.102 Both are connected to vboxnet0 (192.168.56.1). I infected VM1 using WannaCry ransomware but the ...
0
votes
2answers
95 views

Keylogging host from virtual machine

Can a keylogger in a virtual machine (guest OS) capture keystrokes in host OS? Is there any way to do it?
4
votes
1answer
406 views

Program detecting sandboxie present - How to prevent?

I am having issues with a particular game, detecting the presence of the games being run inside sandboxie (An application for running programs inside a sandbox) with the goal of running multiple ...
-1
votes
1answer
111 views

Can I use a vm to learn hacking instead of vps? [closed]

I just began learning ethica hacking from The Hacker Playbook 3, and the author uses AWS an amazon VPS. Can I use a vm using VirtualBox and follow up with the book without problems? Will I be able to ...
1
vote
3answers
541 views

How can one using Tor and a Virtual Machine be traced?

Theoretically, wouldn't it be impossible to be traced using Tor + Virtual Machine? Assuming you connect to a website trying to track your personal location. Your IP address is completely hidden by ...
4
votes
2answers
195 views

How can a VM handle a compromised host?

How can I protect a VM build e.g. with LinuxKit, if my host system is compromised? Are there methods available or am I always at the host's mercy? And is it possible to isolate what's going on inside ...
2
votes
1answer
84 views

Gather system metrics securely from infected VM

I intend to train an RNN on snapshots of the VM metrics to classify malware. I will, therefore, run hundreds of different pieces of malware inside that VM. It has been isolated from my host (as best ...
1
vote
4answers
209 views

Is there any security benefit to using physical machines over VMs?

Consider a critical multi-server system (the clients are not in scope for this discussion). Each server can be a physical machine or hosted as VM. Is there any reason to believe that the physical ...
0
votes
0answers
29 views

Is it safe to run a malware on VirtualBox? [duplicate]

I have recently downloaded VirtualBox and I wanna test my malware. I have followed the tutorials but I'm not very sure about it. The things that I have changed are: Shared Folders set to Read on a ...
9
votes
1answer
675 views

How hard is it to distinguish between remote access to a virtual machine vs a piece of hardware?

Let's say I have full access to a remote machine (specifically, root on a Linux). What is the best method to check whether this is a real piece of hardware or a virtual machine? Most of the methods ...
1
vote
1answer
84 views

SSH Timed out problem [closed]

I can't connect to my kali linux ssh server running in Virtualbox through puTTY. I didn't make any changes to /etc/ssh/sshd_config file, besides Port and PermitRootLogin That's how i booted up my ssh ...
3
votes
0answers
91 views

VirtualBox & Spectre V4

I found the following ticket in the VirtualBox issue tracker: https://www.virtualbox.org/ticket/17987 The important (in the context of this question) part is that the guest OS (Debian) running in ...
2
votes
2answers
313 views

If I turn off Windows Defender Credential Manager off in Windows 10 so I can run a virtual machine in Virtual Box, is that a bad idea?

My processor is supposed to support virtualization: cpu.inf:5f63e534115a322c:IntelPPM_Inst.NT:10.0.17134.765:ACPI\GenuineIntel_-_Intel64 ACPI\GENUINEINTEL_-_INTEL64_FAMILY_6_MODEL_37_-_INTEL(R)_CORE(...
2
votes
0answers
63 views

Trusted Execution Environment Vs. Hypervisor or VMs: How are they related?

I am a newbie learning all about isolation and separation for securing applications and system software. In this regard, I was reading up on ARM TEE and how it is available on most Android phones to ...
1
vote
1answer
73 views

Key penetration from guest OS directly to hard drive

Most of the key protections are used to encrypt key to protect it from malware or other tenants. What if the hypervisor "steals" my key? If I am using a VM provided by a CSP, when I input a key to ...
0
votes
1answer
79 views

How secure is virtualization against breaking out of the box [closed]

How secure are all currently used virtualization technologies (containers - BSD Jail, OpenVZ, Hypervisors - Hyper-V, KVM etc)? I heard about one vulnerability in VMware software, which lets you ...
1
vote
2answers
143 views

Security measures to take upon acquiring a new laptop?

I'm planning on buying a regular HP laptop. However, I'm still a novice when it comes to information security. I'm planning on using this laptop to SOLELY login to my bank accounts and NO OTHER ...
1
vote
1answer
383 views

Can I use a virtual machine to connect to a public WIFI to use Internet by totally isolating the host from it?

I want to use my laptop to connect to a public WiFi in a library but... I have strong security in my Windows host machine (comodo firewall using a public network settings and rules, protocols ...
1
vote
1answer
125 views

Is VM escape has the same severity as me getting in a car crash? [closed]

I'm exploring the threats for VDIs on VMware, based on the article it seems the risk for VM escape has low severity as described here:http://vmescape.com/index.html Did we forget the discussion of ...
1
vote
1answer
400 views

Is it safer to use Qubes with Whonix from Virtualbox than directly on the host computer?

I know it isn't advised to run Qubes-Whonix from Virtualbox due to performance issues, but other than that, is it safer? I.e. is it harder or easier to hack/infect Qubes-Whonix running from Virtualbox ...
3
votes
1answer
86 views

Verifying Host Sterility After Running Malware Tests on Virtual Machine

I know that "VM escape" is becoming a common issue now with malware testing. I'm just wondering if there's any way of verifying if the host system is clean from any infection after running a malware ...
1
vote
1answer
126 views

Virtualized or Container (Remote) Based Browser Isolation is more secure?

There obvious costs differences between them but I am not sure from a security perspective which of them considered to be more secure.
2
votes
4answers
126 views

The safest way to transfer files to an offline test environment

I'm wondering what the best tactic is to transfer dangerous files from an internet connected machine to an offline, separated from the web, virtual machine. Why should I do that? Because I want to ...
4
votes
0answers
105 views

What security isolation exists between VDI instance to VMware Horizon to ESX?

I read about malware that was able to escape the VM and get to the VMware Horizon host and then to hypervisor ESX, but I am not sure what security controls exist to prevent malware from jumping to ...
2
votes
0answers
67 views

How a browser isolation product is safer than our enterprise-hardened Chrome? [closed]

We have been offered a security product that provides browser isolation but I am not really sure what the benefits could be of such a solution in an enterprise.
1
vote
0answers
26 views

VirtualBox file sharing: is there a security difference between never having done it and having done it but now disabled it?

I'm thinking of getting started with VirtualBox but for security reasons I would like to keep file sharing off. However, there are certainly some files I'd like to transfer from host to guest. Would ...
1
vote
0answers
100 views

Secure way to sign virtualbox module for secure boot

I'm not sure if the Virtualbox version from the repository of my Linux distribution is already signed and works right away, but since it's not up-to-date I'm installing Virtualbox from the official ...
1
vote
0answers
206 views

Is VMWare workstation really safe? [duplicate]

I want to try to run some malwares in VMWare and I am a little bit afraid. Is it really safe? Is there any option that malware can get into my main PC?
3
votes
1answer
204 views

Isolate Virtual Machines on host-only adapter

I am performing malware analysis on VirtualBox. I want the VMs to only communicate with each other. Using host-only adapters, I have installed a Windows 7 VM (192.168.56.101) with the default gateway (...
1
vote
0answers
32 views

How much VirtualBox device/ios emulator/blueStacks informatin can be logged/tracked by servers/ apps?

This question is intended to know if we can be tricked by Virtual devices emulators. How much logging information can servers/apps request to tell the difference? In the other word, Can we hide our ...
0
votes
2answers
143 views

Securely compile foreign code and run it on a server?

I would like to set up a server that can receive source code directly, compile/interpret it and execute it. The code could be C#, Java, C++, C, Javascript, PHP... There will obviously be security ...
0
votes
1answer
72 views

Virtual machines vs separate physical machines for testing potential malware

If you have to run potentially insecure executables, would using a separate laptop have any security benefit compared to a virtual machine, or would it be worse in the sense that the machine's ...
0
votes
1answer
521 views

Android x86 vs Android on Qemu ARM

Situation: Emulating Android devices for pen-testing Problem: Choosing between emulating Android x86 or emulating Android on Qemu runing on ARM Question: In terms of vulnerabilities/exploitability, ...
2
votes
3answers
414 views

Malware Analysis

What would be a good approach for testing malware or bad url's from things picked up from my SIEM to validate them? I was told to setup a VM for these tests but don't want it to hit the internal ...
2
votes
1answer
175 views

What are the security trade offs between the different methods for encrypting a guest VM image?

The scenario is a lightly secured home or work PC used primarily for low-sensitive operations. For more secure activities a pre-built and restrictive virtual machine will be used. I'm mostly ...
53
votes
2answers
8k views

If a container is compromised does that mean host also compromised?

Recently, I have heard of a new virtualization tech called containers. Suppose the container has been compromised, does this mean the host is also compromised (since the container is a process on a ...
2
votes
1answer
533 views

Is Meltdown/Spectre mitigation necessary in virtual machine as well as in hypervisor? [duplicate]

I am running virtual machines in kvm/qemu hypervisor. The hypervisor has Meltdown/Spectre mitigation enabled in kernel. Is it necessary that virtual machines have the Meltdown/Spectre mitigation ...