Questions tagged [virtualization]

Virtualization is the creation of a virtual (rather than actual) version of something, such as an operating system, a server, a storage device or network resources.

Filter by
Sorted by
Tagged with
3 votes
1 answer
2k views

Is it possible to detect host-machine of my virtual-machines?

So basically I need to know is there any way to find a connection (or relation) between packets sent by my VMs and my host machine. In my lab I have lots of workstations, each running a VirtualBox ...
1 vote
0 answers
66 views

Was the kernel I used vulnerable/deprecated?

Background Information As I developer I am running multiple (partly virtual-)machines with Debian GNU/Linux and on some of these machines I work with highly confidential documents or dangerous ...
0 votes
0 answers
24 views

OSSIM logs and disk space?

I've installed OSSIM (no USM) on a VM and am trying to figure out how much disk space I need to give this VM. Basically does anyone know: How can I estimate how much disk the logs are using each day? ...
3 votes
0 answers
386 views

AMD SEV equivalent of Intel SGX EGETKEY?

An application running under Intel SGX can invoke EGETKEY to obtain an encryption key from the CPU HW. The same key will be obtained each time the application is run. This allows the application to ...
0 votes
1 answer
64 views

What are the best security practices when when using VirtualBox on Windows 11 with an old OS?

Got a cheap new laptop to play old games with a VM of Windows XP/7, with the host being Windows 11. Using a WiFi that isn't my own (as I don't plan on connecting to the internet with this laptop) I ...
1 vote
1 answer
504 views

VirtualBox + VPN with Win10 Host - how secure is it?

I got a notebook running Windows 10 from my company which I am officially allowed to use privately. I have to travel a lot. I don't want to carry a second notebook. Since the admins have access to ...
3 votes
1 answer
238 views

AMD SEV - attack through the hypervisor console

AMD SEV enables creating a trusted encrypted VM where the memory of the whole VM is encrypted using cryptographic keys and features on the CPU and thus not visible to the cloud provider (in theory if ...
0 votes
1 answer
50 views

RDP to a Virtual Machine where should i do the security Measures

i have a Computer, on which Hyper-V is installed, there i created a Virtual Machine. I want to connect only and directly to the Virtual Machine with Remote-Desktop from outside the Network I have some ...
3 votes
1 answer
2k views

Is Windows Sandbox a viable alternative to conventional VM solutions considering its design?

The idea of having a fast, disposable VM at the palm of my hand appeals to me very much. It makes adding an extra layer of security to any thing I want to do so easy - just launch the sandbox ...
57 votes
2 answers
9k views

If a container is compromised does that mean host also compromised?

Recently, I have heard of a new virtualization tech called containers. Suppose the container has been compromised, does this mean the host is also compromised (since the container is a process on a ...
3 votes
1 answer
61 views

Security advanatages to running a webapp inside a container, which is ALSO inside a vm?

I am doing some security consulting for a client who intends on deploying a Ruby on Rails web application. I am trying to ascertain a couple of different things... Is it any more secure to run an ...
2 votes
3 answers
26k views

How to set reverse tcp connection when doing pentesting in VMs?

msfconsole is a cool opensource pentesting tool from metasploit. Once the exploit is valid, we can set payload to the victim. For persistent connection, we may need meterpreter. But we often test ...
0 votes
1 answer
311 views

Is it safer to run executable file (not safe, may contain virus) on VBox

I have a host system (Windows 10) with premium antivirus and running a Windows 7 in Virtualbox with no antivirus. I have installed sandboxie and try to run executable files that may contain virus. Is ...
12 votes
8 answers
13k views

How anonymous is my setup?

my friend and I are trying to make the most anonymous setup for a computer to do things across the internet without being known the location from which it came. Our setup is as follows: A windows ...
2 votes
1 answer
650 views

Mitigation of Spectre and Meltdown affecting host OS from guest OS (Virtualbox)

I don't know all the details of Spectre and Meltdown, but the way I understand it is that they allow reading from memory, not writing to it. Also, I read that at least Spectre can get out of the ...
6 votes
2 answers
800 views

Can Google access data in their Confidential Computing VMs?

A cloud operator such as Google can take a snapshot of a normal VM. This includes CPU state, RAM and disk. This can then be copied to another physical and resumed there. Or it can be analyzed off-line,...
0 votes
2 answers
258 views

Can computers built in minecraft be used to hijack hosts?

As people build more powerful computers in minecraft which can then run programs, is there a way to use those computers to run programs that hijack the host in some way? Possible contest example would ...
0 votes
1 answer
35 views

Keylogging virtual machine from host

Can a keylogger in a host machine capture keystrokes in virtual OS? I'd like to get into cryptocurrencies but I don't know if my machine (mac) is secure. So I thought I could create a VM for it but I ...
2 votes
1 answer
172 views

How can a typical researcher protect against VM escapes?

I read a similar question here on how large companies protect themselves and became intrigued about how this would transfer over to less significant operation (ie security researcher, small company, ...
3 votes
0 answers
204 views

When using VirtualBox, is it better to use the VirtualBox encryption or the OS disk encryption?

VirtualBox has an option to encrypt the drive of a VM. When I installed Debian or Ubuntu, I have the option to say that I want the full disk encrypted. I'm thinking that both do pretty much the same ...
0 votes
1 answer
106 views

How to store malware for analysis?

I am planning on analysing some malware samples dynamically using a sandbox tool and a target Windows VM. The host (physical machine) runs Ubuntu and in it are the sandbox and target VM. So far I only ...
4 votes
2 answers
188 views

Is it secure to keep malware in filesystem of VMs?

We are going to install a sandbox solution that requires Ubuntu Server as the underlying OS (the product is not shipped as a ready to install appliance). For performance reasons the malware samples ...
31 votes
5 answers
9k views

If my machine is infected and I run a Virtual Machine inside of it, will the VM also be compromised

I've been researching on virtual machine security and found a lot of articles detailing how an infected VM is isolated (or not) from the host machine. But I couldn't find any answers to the opposite ...
1 vote
3 answers
126 views

security measures for proprietary code on a VPS

I've got several C++ and Python scripts containing proprietary algorithms, which are latency-sensitive and hence need to be on a system near the data center serving data to them. While a VPS is ...
1 vote
1 answer
100 views

What is the point of an OS (Win11) requiring a TPM (or vTPM) beyond a layer of DRM?

Windows 11 requiring a TPM of some sort seems more like a DRM preventing me from duplicating a W11 Virtual Machine on multiple systems and distributing it versus any tangible benefit to the end-user. ...
2 votes
2 answers
176 views

How to create a safe environment in Windows 10 for high-performance programs?

My friend handed me a .exe file of an old game we want to play together. My laptop has important files, so I do not want to install it immediately. I am still sceptical that he might not know it ...
11 votes
5 answers
13k views

Is it safe to run untrusted application inside a Virtual Machine [duplicate]

I have some untrusted software. I plan to run them on a guest Windows 7 on my host Windows 8 OS using Oracle VirtualBox. In the worst case, will only my guest OS be affected? Can the hacker access ...
0 votes
0 answers
117 views

How to isolate Windows10 Virtual machine from w10 host (virtualbox) for malware analysis [duplicate]

My goal is to find malware that performs network activities and captures the traffic with Wireshark. I have a Windows 10 laptop host machine and VirtualBox which has virtual Windows 10 machine. I am ...
2 votes
1 answer
101 views

Why must a virtual image be secured

Virtual machines and their disk images are simply files residing somewhere. So I supposed this means that, for example, a stopped VM is potentially accessible on a file system. What could an attacker ...
0 votes
2 answers
92 views

What happens to apps, files, objects in a VM if it gets deleted

Usually, when a file is deleted on your computer, it is simply unlinked. The file data is still stored on your disk, there's just nothing pointing to that spot in the memory, and the OS interprets ...
2 votes
2 answers
2k views

What's the safest virtualization tool for running unsafe software - VirtualBox vs Windows Sandbox vs Hyper-V [closed]

I'd want to ask, what's the safest environment to run potentially unsafe software? I'm aware that this question may be very tricky, because each of those may have its flaws, but generally speaking ...
0 votes
0 answers
49 views

Could my Windows 7 VM access my network and perhaps my host internet history or data?

I have a Windows 7 Pro VM running on an Ubuntu 20.04 host. I'm a bit new to VirtualBox and set up the VM but it was too slow to do anything so I took a snapshot and closed it. I think my Ubuntu host ...
2 votes
1 answer
131 views

How to make sure my laptop (Ubuntu 20.04) is secure with a Windows 7 VM?

I have an old laptop which is running Ubuntu 20.04 and I am planning to use a virtual machine of Windows 7 Pro (using VirtualBox maybe). As its an old laptop and not my primary source of using the ...
1 vote
2 answers
696 views

Alternative to Qubes OS network domain for a server

I know that Qubes Os is not suitable for a server use, but some of its features are quite interesting for that. In fact, all the network drivers are contained in a VM that run a different Linux based ...
1 vote
1 answer
119 views

setting up a lab in virtualbox for different tasks: local net testing & vulnerable virtual network

I have seen several tutorials about setting up Virtualbox networks for Kali & vulnerable machines together using the option Internal network, but I have several questions regarding other ...
0 votes
2 answers
198 views

Using Hydra not sending traffic to target VM

I have 3 VM's 1 with Ubuntu server version 20.04, apache2, php, mysql and DVWA. (10.0.2.4) 1 with Ubuntu client version 20.04 with hydra installed. (10.0.2.5) 1 with Kali 2021.3. (10.0.2.6) All VM's ...
1 vote
1 answer
104 views

Are CPU side-channel attacks still a concern on VPSs

I've been looking into getting a VPS to run an OpenVPN server on and a few other things. I've been speaking to a hosting company and they have sent me this screenshot to show they are protected ...
1 vote
1 answer
130 views

Is protecting against Meltdown and Spectre on virtual servers actually possible?

I've been reading into the Meltdown and Spectre bugs recently and the issues they cause for virtualised servers, as memory in one VM can potentially be accessed by another user in a separate VM with ...
0 votes
1 answer
121 views

Can you subvert a physical system at runtime?

In case of a virtual machine it is possible to break out of the VM and gain code execution on the host. In that way you could evade any detection mechanism for malware inside the VM and maybe even on ...
6 votes
3 answers
1k views

What kind of access on the guest is required to break out of a virtual machine?

Is it enough to exploit the vulnerability in a program? Is root or kernel access required? Are there maybe even possibilities to directly exploit the host without any vulnerabilities in the guest? To ...
0 votes
1 answer
1k views

Can Microsoft collect data from inside a virtual machine?

If I spin up an OS in a VM, can Microsoft still collect and track data from the guest OS? I'm just wondering if Windows 10 collects that much data or not. Just FYI: no, I'm not a nutter that's ...
27 votes
4 answers
10k views

Why can hardware assisted virtualization be a security issue?

Avast antivirus has an option for disabling "Enable hardware-assisted virtualization". If it's enabled, how is it a security issue?
1 vote
1 answer
298 views

Virtual machine protection

Let's say I have VirtualBox or Vmware Workstation on a Windows 10 Pro host, hosting Windows or a Linux distribution such as Ubuntu or CentoS). If I have an antivirus or Internet Security software on ...
5 votes
2 answers
2k views

Is it cryptographically safe to use veracrypt in a virtualbox virtual machine?

Does virtualbox provide enough entropy (random numbers) for the veracrypt program on the virtual machine? Is it cryptographically safe to use veracrypt inside a virtualbox in a windows 10 guest?
1 vote
2 answers
439 views

Browser fingerprint is unique while running a VM of a clean install of Windows 10

So I used Qemu on Ubuntu 20 to emulate a computer running windows 10. I kept all of Qemu default values. Then, while installing the Windows 10 iso, I kept all the default values once again. Finally, I ...
0 votes
1 answer
110 views

Can I detect malware that’s on my host OS if I’m using diagnostic tools in a VM?

If I have a VirtualBox VM running Kali Linux, can I use its diagnostic tools to search for malware on the host?
9 votes
2 answers
521 views

How effective is Windows KDP for exploit mitigation in practice?

Windows Kernel Data Protection is a kernel security feature which appears to use Extended Page Tables (EPT, a hardware virtualization feature) to enforce read-only pages. How effective is this at ...
3 votes
3 answers
755 views

Is VeraCrypt encryption of VHDX correct?

I have created a dynamically expanding vhdx of 500GB to store my backups to - I have decided not to create a 500GB container due to time it would take to create one. I have encrypted the drive ...
2 votes
1 answer
1k views

What happens to a VM when you delete it? [closed]

I was curious what happens when you select "delete all files" option in Virtualbox? Are files saved on the installed OS in Virtualbox recoverable on your hard drive? Is there a secure way I can delete ...
54 votes
6 answers
20k views

If malware does not run in a VM why not make everything a VM?

There is a lot of malware that can detect whether it is running inside a VM or sandboxed environment and if such environment is detected it can conceal it self and not execute. So why not make ...

1
2 3 4 5
10