Questions tagged [virtualization]

Virtualization is the creation of a virtual (rather than actual) version of something, such as an operating system, a server, a storage device or network resources.

Filter by
Sorted by
Tagged with
0
votes
2answers
10 views

During kali installation on virtual box,avast detected a virus,how is it possible?

I was installing kaly on virtual box,on W7 host,and during the upgrading/installation package,avast has detected 2 threat,in particular on mimikaz package. Question is,how can avast "see" throug the ...
0
votes
1answer
34 views

How one can find I am using virtual box Virtual Machine linux through Anydesk remote application?

I recently created a virtualbox virtual machine of Ubuntu 18.04 and installed Anydesk remote desktop app in it. An IT guy accessed my computers desktop via Anydesk app, but he is actually inside the ...
1
vote
1answer
125 views

VirtualBox + VPN with Win10 Host - how secure is it?

I got a notebook running Windows 10 from my company which I am officially allowed to use privately. I have to travel a lot. I don't want to carry a second notebook. Since the admins have access to ...
1
vote
1answer
90 views

Can pen-testing be done on a person's regular machine, or should it be done on a separate machine?

I am a developer and I have been looking more into security / pen-testing to make sure my application is secure. A lot of the resources I have looked at mention having a "pen-testing machine/lab/box,"...
0
votes
1answer
66 views

Can't get IP of vulnerable VMs [closed]

I have Kali Linux installed on my computer, I have VMware Workstation 15.5 downloaded on my Kali machine, and I have also vulnerable VMs on VMWare but I don't know how to get IP of vulnerable VMs like ...
0
votes
1answer
55 views

If I seperate VPS into WebApp/MySQL VPS & separating WebApp projects into Admin/User projects. Is It more secure?

If I want to deploy Laravel WebApp using MySQL DB on VPS like DigitalOcean, Vultr or similar platforms, should I separate VPS into WebApp VPS & MySQL VPS? Is it more secure? And what if I ...
6
votes
2answers
275 views

Does RNG play a role in PGP signing?

We have a Jenkins system that builds and PGP-signs software releases, and we are considering moving the signing component to an isolated VM instead of running it as part of the overall builder ...
3
votes
1answer
107 views

How to hide the fact that a system is virtual machine from malware

I've read that many types of malware scan a system for various clues regarding virtualization software, in order to stifle forensics. Is there any way to hide the fact that a computer is a virtual ...
2
votes
1answer
141 views

What's the safest virtualization tool for running unsafe software - VirtualBox vs Windows Sandbox vs Hyper-V

I'd want to ask, what's the safest environment to run potentially unsafe software? I'm aware that this question may be very tricky, because each of those may have its flaws, but generally speaking ...
0
votes
1answer
85 views

Creating secure virtual machine that nobody can see its content including the host machine? [duplicate]

This problem is completely different from "running malware in a VM"! Suppose I want to have a virtual machine running some software with secret data. But I do not have complete control of the host ...
1
vote
1answer
130 views

Alternative to Qubes OS network domain for a server

I know that Qubes Os is not suitable for a server use, but some of its features are quite interesting for that. In fact, all the network drivers are contained in a VM that run a different Linux based ...
1
vote
1answer
361 views

Mitigation of Spectre and Meltdown affecting host OS from guest OS (Virtualbox)

I don't know all the details of Spectre and Meltdown, but the way I understand it is that they allow reading from memory, not writing to it. Also, I read that at least Spectre can get out of the ...
0
votes
1answer
92 views

How to configure a VM to protect all my hardware fingerprint from guest OS and softwares?

This question was originally Does Firefox in VM have a common enough fingerprint so I don't need tor browser? in Tor community. I want to know about what a web browser's fingerprint like in a VM, ...
3
votes
0answers
73 views

Disguise System as VM

Malware sometimes uses anti-vm and anti-sandbox behavior to act like harmless software. Wouldn't it be a good prevention strategy to disguise the host machine as a VM so that potential malware would ...
-1
votes
1answer
50 views

Run Phone Apps in VM Anonymously and Security Risks of Virtualbox

Would it be possible to run phone apps that connect to the internet (eg. youtube, instagram, etc.) on an Android VM (or any sort of phone VM, doesn't need to be android) in VirtualBox within a host OS ...
1
vote
0answers
41 views

Rebooted host machine from inside VM, should I report this issue and where to report?

Excuse my ignorance as I don't work in infosec. I ran reboot inside a linux virtual machine using VirtualBox on Mac and it rebooted my host machine. I am trying to reproduce the problem but haven't ...
27
votes
4answers
4k views

Why can hardware assisted virtualization be a security issue?

Avast antivirus has an option for disabling "Enable hardware-assisted virtualization". If it's enabled, how is it a security issue?
2
votes
1answer
221 views

What are the security trade offs between the different methods for encrypting a guest VM image?

The scenario is a lightly secured home or work PC used primarily for low-sensitive operations. For more secure activities a pre-built and restrictive virtual machine will be used. I'm mostly ...
3
votes
1answer
10k views

Is it safe to run virus (infected executable) inside VirtualBox? [duplicate]

Is it safer to run suspicious (trojan, malware, virus) software/exe/applications inside VirtualBox (Windows) and what threats do they have?
0
votes
2answers
149 views

Is using virtualbox for web browsing worth it for added security?

My host machine is running Windows 10. I've installed VirtualBox and use it to run an Ubuntu VM. Inside the VM I use Firefox to do all of my web browsing that doesn't involve entering sensitive data ...
6
votes
4answers
22k views

Obtaining the IP address of a virtual machine to use Metasploit

I am beginning to learn Metasploit and, to play safe, am practicing it out on a virtual machine. The target machine, which is a virtual machine, is under NATing. How do I access it/ connect to it- ...
1
vote
4answers
238 views

Is there any security benefit to using physical machines over VMs?

Consider a critical multi-server system (the clients are not in scope for this discussion). Each server can be a physical machine or hosted as VM. Is there any reason to believe that the physical ...
53
votes
2answers
9k views

If a container is compromised does that mean host also compromised?

Recently, I have heard of a new virtualization tech called containers. Suppose the container has been compromised, does this mean the host is also compromised (since the container is a process on a ...
1
vote
1answer
56 views

Running virus from real folder in Sandboxie

What if I download a virus to my real folder but only execute it in Sandboxie, is it less secure that if I download it directly from SB?
286
votes
9answers
42k views

What makes Docker more secure than VMs or bare metal?

I recently had a discussion with a Docker expert about the security of Docker vs. virtual machines. When I told that I've read from different sources that it's easier for code running within a Docker ...
2
votes
1answer
87 views

Does Docker affect the quality of cryptographic operations?

Is running cryptographic operations (encryption / decryption / signing / verifying / key-exchange / key-generation) in a Docker container affecting the quality of the crypto or entropy? If it does ...
1
vote
1answer
147 views

How Concerned should I be about VM Escapes?

I intend to start learning how to do malware analysis and forensics, but I have a concern or two. I want to start by just analysing code that I write myself, and that'll be fine. But at some point I'...
3
votes
1answer
186 views

Nmap giving different result between Mac OS scan and Linux (Kali) scan [closed]

I try to do a simple TCP scan on an Kubunt VM (is on VirtualBox), from two different OS. From the Host (Mac OS system) and from a Kali Linux VM (tried VirtualBox and Parallels also). Kali Linux (...
1
vote
1answer
75 views

Is a VPN and Virtual Machine secure enough for running programs that might include malware [duplicate]

I am trying to start a business online but don't want viruses from any sketchy software that I will be downloading. I will be using a VM and a VPN but was wondering if I needed any other software so ...
4
votes
0answers
87 views

Security issues in QEMU [closed]

My intention is to add support in QEMU for a new machine/platform. I just started this project, so I can't say more details about it because I don't know them. My question is related about the ...
6
votes
3answers
6k views

Security of LXC compared to OpenVZ

For years, I'm now using OpenVZ on my server, but support discontinued for Debian and Ubuntu, current releases seem to focus on LXC now, which is not a bad idea from the point of comfort. But what ...
2
votes
0answers
308 views

Creating a dynamic malware analysis environment [duplicate]

I have analysed a shortcut virus statically and its impact on USB drives and wrote a code to repair its damage. My static analysis of this malware on USB drives: It creates shortcuts for all folders ...
0
votes
1answer
1k views

Which is more secure? AMD DASH or Intel vPro [closed]

In term of overall security is AMD DASH or Intel vPro preferable? They both have: Hardware virtualization Remote Manageability Hardware-enhanced security etc... I can't really distinguish the ...
2
votes
0answers
44 views

Safe Bash Emulation - using chroot and qemu

I am trying to run a bash script in a sandbox to gain information about what it launches. There don't appear to be good emulators or static analysis tools for it, so I was going to run it in a chroot, ...
1
vote
0answers
44 views

Suppose you have a simple host running Virtualbox with NAT networking and do malware testing on it, how safe are you? [duplicate]

So, just a single windows host attached to the router and a virtual machine running on it. No shared folders or clipboard. Just testing your average malware. Note that this question talks about just ...
4
votes
1answer
482 views

Program detecting sandboxie present - How to prevent?

I am having issues with a particular game, detecting the presence of the games being run inside sandboxie (An application for running programs inside a sandbox) with the goal of running multiple ...
1
vote
0answers
58 views

How to affect VMs in a network using WannaCry?(Cuckoo Sandbox)

I have a network consisting of 2 VMs(Windows 7). VM1:- 192.168.56.101 VM2:- 192.168.56.102 Both are connected to vboxnet0 (192.168.56.1). I infected VM1 using WannaCry ransomware but the ...
0
votes
2answers
103 views

Keylogging host from virtual machine

Can a keylogger in a virtual machine (guest OS) capture keystrokes in host OS? Is there any way to do it?
2
votes
1answer
84 views

Gather system metrics securely from infected VM

I intend to train an RNN on snapshots of the VM metrics to classify malware. I will, therefore, run hundreds of different pieces of malware inside that VM. It has been isolated from my host (as best ...
3
votes
1answer
243 views

Isolate Virtual Machines on host-only adapter

I am performing malware analysis on VirtualBox. I want the VMs to only communicate with each other. Using host-only adapters, I have installed a Windows 7 VM (192.168.56.101) with the default gateway (...
-1
votes
1answer
115 views

Can I use a vm to learn hacking instead of vps? [closed]

I just began learning ethica hacking from The Hacker Playbook 3, and the author uses AWS an amazon VPS. Can I use a vm using VirtualBox and follow up with the book without problems? Will I be able to ...
1
vote
3answers
749 views

How can one using Tor and a Virtual Machine be traced?

Theoretically, wouldn't it be impossible to be traced using Tor + Virtual Machine? Assuming you connect to a website trying to track your personal location. Your IP address is completely hidden by ...
4
votes
2answers
204 views

How can a VM handle a compromised host?

How can I protect a VM build e.g. with LinuxKit, if my host system is compromised? Are there methods available or am I always at the host's mercy? And is it possible to isolate what's going on inside ...
-3
votes
2answers
162 views

Impossible VM-detection countermeasures [closed]

Are there any vm-detection techniques (of malware) which are impossible to mitigate in your vm? If yes, which?
14
votes
3answers
7k views

Should Virtual Machines be patched for Meltdown and Spectre?

In Meltdown and Virtual Machines it was clarified that at least Spectre works crossing VMs. This of course means that the Hypervisor must be patched, but Should the VM OS be patched as well? Not ...
2
votes
0answers
443 views

Can an iPhone run two operating systems?

I'm looking for something similar to Virtualbox, but in iOS where each system would be isolated. The content in the virtual environment shouldn't be detectable by the host. (Not restricting answers to ...
1
vote
5answers
678 views

Why forward a virtual machine with SSH to Putty

I have watched a tutorial from Udemy where a guy is show how to crack wireless network. The person in the video set up a virtual machine Oracle VM VirtualBox network type NAT then he forward the ...
1
vote
1answer
74 views

Key penetration from guest OS directly to hard drive

Most of the key protections are used to encrypt key to protect it from malware or other tenants. What if the hypervisor "steals" my key? If I am using a VM provided by a CSP, when I input a key to ...
0
votes
0answers
30 views

Is it safe to run a malware on VirtualBox? [duplicate]

I have recently downloaded VirtualBox and I wanna test my malware. I have followed the tutorials but I'm not very sure about it. The things that I have changed are: Shared Folders set to Read on a ...
2
votes
2answers
345 views

If I turn off Windows Defender Credential Manager off in Windows 10 so I can run a virtual machine in Virtual Box, is that a bad idea?

My processor is supposed to support virtualization: cpu.inf:5f63e534115a322c:IntelPPM_Inst.NT:10.0.17134.765:ACPI\GenuineIntel_-_Intel64 ACPI\GENUINEINTEL_-_INTEL64_FAMILY_6_MODEL_37_-_INTEL(R)_CORE(...

1
2 3 4 5
9