Questions tagged [virtualization]

Virtualization is the creation of a virtual (rather than actual) version of something, such as an operating system, a server, a storage device or network resources.

Filter by
Sorted by
Tagged with
4
votes
2answers
267 views

What is the best way to screen potentially compromised USB or flash devices?

I've got some flash devices. It is a bit like playing Russian roulette. The devices are of unknown origin containing information of unknown value. However, the potential value is great enough to be ...
1
vote
5answers
6k views

Will Running MEMZ or Wanna Cry in VirtualBox Harm Host Computer?

I have read some threads talking about the safety of running malware in a VM. I found out that it may not be safe and there is still a risk. I would like to know specifically if running Wanna Cry, a ...
3
votes
1answer
386 views

VirtualBox 3D acceleration security risk

I have VirtualBox running a windows 7 VM on it and the performance is really choppy, likely because of the 3D acceleration. However I read through VirtualBox's security page, and it states: "Enabling ...
1
vote
1answer
5k views

How to get IP address of a virtual box machine from hostmachine? [closed]

I am using Windows 7 host machine and I have loaded a vulnhub ctf into virtualbox. Now i dont have credentials to login to the ctf machine which is a unix machine. Can i get the ipaddress of this CTF ...
0
votes
1answer
335 views

Link shortener that virtualizes link for reflected XSS?

I've been learning about XSS recently, and then I was trying to come up with ways to bypass anti-XSS filters in browsers. I though, "Maybe if you used a link shortener that virtualized your site!", ...
0
votes
2answers
97 views

Do Cyber Range(s) detect Business Logic Security Failures?

I had been studying Cyber Ranges for a while & found out there applicability in defense, military control systems, enterprise & in medical. I'm interested to know if the stimulation which is ...
0
votes
1answer
48 views

Setting Up My first network Labs? [closed]

so i'm a complete newbie to this field, but i'm using this book - 'Metasploit The peentration Tester's Guide' - by David Kennedy, etc. I'm attempting to set up the virtual labs needed in order to ...
2
votes
2answers
336 views

Is DHCP spoofing ever possible on VMware?

So I've just watched this Defcon video:https://www.youtube.com/watch?v=RaA5dEIqzzQ&t=1583s. Apparently they were able to set up a rouge DHCP server and get a 50/50 chance of sending the victim the ...
1
vote
1answer
52 views

How to ensure the traffic between vm and host doesn't mix in Windows?

I'm looking forward to using a volatile VM. And according to this source : By default, network address translation (NAT) is configured by the virtualization software such that the guest OS shares ...
2
votes
0answers
551 views

Does any DRM system work within a Virtual Machine? [closed]

I'm running a few quick tests to see if any DRM system works on a VM. Notably, most DRM systems (haven't found one yet), don't work on a virtual device: iPhone Simulator on OSX (FairPlay) Windows ...
3
votes
1answer
129 views

Is there a security benefit to be found in using a virtual machine if the host is infected?

What I have found out so far is that keyloggers, for example, can still capture what you type, even within the virtual machine. I could not, however, find much information regarding other effects of ...
1
vote
1answer
131 views

Escaping Virtualbox type intrusion detection?

Is there a way to run intrusion detection for if anything tries to escape from Virtualbox? Thank you.
4
votes
0answers
2k views

Windows XP SP3 vulnerable iso to ms_08_067 [closed]

I am following Georgia Weidman book - Penetration Testing A Hands-On Introduction to Hacking. In her book, a Windows XP SP3 iso vulnerable to ms_08_067 is needed. I have an XP VM, but looks like this ...
5
votes
1answer
237 views

Is a QEMU live session less secure than a proper VM?

I often test malware in QEMU VMs, and after I have tested some malware in a VM, I delete the VM for security reasons as well as the fact that if I want to test more malware, a clean environment to ...
2
votes
3answers
173 views

Isolate dangerous applications in VM

I want to harden my personal computer against possible security threats. One thing I'm considering is to for example put my torrent client inside a virtual machine, together with the applications ...
1
vote
1answer
4k views

Is is possible to intercept Guest VM traffic on the host machine's Burpsuite

I'm running Kali on Windows 7 via VMWare, and would like to be able to access private network websites, which i can't seem to be able to do. So I tried to forward the system traffic to the host ...
3
votes
2answers
687 views

Security vulnerabilities when sharing files between virtual machine and host

According to this link, when running a windows OS virtual machine on a windows host OS, one can share files like one would share files between two computers on a network by ensuring that file sharing ...
2
votes
0answers
95 views

virtual environment for learning

I have a basic lab with one Win7 VM in a LAN and another (vyos) serving as the default gateway. When I start my Kali Linux VM (it is attached to the same LAN segment) I can see ping requests and ...
0
votes
1answer
85 views

Virtual machine against screenshot / key-logging trojans?

This question may sound naive to a security expert, but I guess that's why I'm here. x-) Would creating a virtual machine be any protection against potential trojans that monitor my system? My ...
3
votes
2answers
1k views

Can USB ethernet passthrough to a KVM virtual machine isolate network-related kernel vulnerabilities?

I'm worried about the attack surface that the linux kernel networking stack, including nic drivers and packet filtering, offers to a remote attacker. So I'm planning to isolate as much of the ...
1
vote
0answers
1k views

Security through virtualization: does Ryzen support Rapid Virtualization Indexing (RVI), aka Second Level Address Translation (SLAT)? [closed]

RVI is required by Windows Hyper-V... RVI will be required by QubeOS 4... Lots of info about the new RYZEN CPU Series but as far as I know, no news about RVI support ? So, any source to point at ...
1
vote
1answer
696 views

Is it safe to use TrueCrypt inside an encrypted Virtualbox guest OS?

In order to minimize potentially compromised software from reading what I'm writing in Veracrypt I want to use the software inside an encrypted guest OS with no Internet, specifically Ubuntu 16.04. ...
5
votes
1answer
445 views

VM vs System Call Interposition vs Software Fault Isolation

I have an exe file that I don't trust (maybe its infected with malware). I know that running it in a VM will isolate the exe file from my system, but what about using mechanisms such as System Call ...
0
votes
1answer
696 views

Containerizing vs. Sandboxing vs. Layering vs. Virtualizing vs. whatever

What is the right term to describe what solutions like Invincea/Bromium are offering? Is there a difference?
3
votes
1answer
3k views

Networking in Qubes OS [closed]

I've started recently to use Qubes OS and I want to set up a virtual IDS and IPS in separate VMs, but I can't figure out how the communications between different VMs works here. Each VM should be ...
4
votes
1answer
3k views

Is Docker a PCI DSS compliant form of virtualization?

I'm thinking of the mass of "single function per server" virtual machines which really do nothing in terms of memory and CPU that a PCI DSS certification entails, the NTP server, central ...
2
votes
1answer
2k views

How to set up a pentesting lab in Amazon Web Services?

How can I add vulnerable VMs in AWS instance of Kali? Do I need to install VMware or Virtualbox on top of the Kali instance in the cloud and then install the vulnerable VMs or is there any other ...
3
votes
3answers
856 views

Do certain Virtual Machine programs “Sandbox”/protect the main OS better than others? Does the category of VM matter?

I am looking into VMs to use, and from wiki https://en.wikipedia.org/wiki/Virtual_machine I notice there are 3 main types of VMs. FULL VIRTUALIZATION In full virtualization, the virtual machine ...
1
vote
1answer
984 views

Does my host machine stay completely safe if I'm browsing the dark web using virtual box or vmware on bridge network connection? [duplicate]

I'm just asking if my host machine stays safe when browsing the dark web darknet using Tor on a virtual machine with bridge connection through the host machine ? Since the virtual machine will be ...
2
votes
2answers
906 views

By how much does virtualizing a perimeter firewall reduce network security?

I am looking to set up a hardware firewall for my home network. However, I am but a poor lowly student so I'm looking to virtualise to reduce hardware costs. Now for a diagram to explain what I have ...
1
vote
1answer
68 views

Encrypt/Isolate files of the Software

We want to create a secure email client based on Thunderbird source code and looking for a method to encrypt files or to isolate files from being stolen by some malware. and to avoid infecting pc via ...
1
vote
0answers
50 views

What security risks are associated with using a unofficial .vmdk? [duplicate]

I'm in the process of installing macOS Sierra on a virtual machine (VirtualBox) using a virtual machine hard disk file retrieved from this site. What are the security risks I'm running by using this "...
1
vote
4answers
158 views

If you accidentally install a malicious OS disk image in a VM, can it cause any harm?

I just downloaded a disk image. After trying to install in a Virtualbox VM and seeing that it wasn't successfully booting into an installer, I checked into the md5sum. It seems the md5sum that is said ...
2
votes
1answer
8k views

Is it safe to run virus (infected executable) inside VirtualBox? [duplicate]

I need to run several specific software I've found in internet. However, I dont want to run them in my Windows (they seem clean, but I still in doubt).. My question is, is it safer to run such ...
2
votes
2answers
60 views

Insider's threat to a hosted server

If we buy a VPS, the admin of the enclosing server can always steal our data, right? Is using a dedicated server a solution? (We can't afford our own datacenter in any case.) But it seems that ...
9
votes
3answers
6k views

Is a Windows XP virtual machine with no network connection safe from hacking? [duplicate]

If I install Windows XP as a Virtual Machine with no network connection, is it safe from being hacked? My main OS would be Windows 8.1 with internet.
0
votes
1answer
782 views

Help with creating Heartbleed vulnerable server

I am using Virtualbox internal network with Kali Linux and Ubuntu 12.04. The version of OpenSSL for the Ubuntu is 1.0.1 which should be vulnerable. I have created a HTTPS server using nginx on the ...
1
vote
1answer
2k views

Metasploit reverse shell through docker and virtual box

I am running metasploit on docker from: remnux/metasploit and I want to open a reverse shell on a virtual machine running windows 10 in virtual box. The docker container and the vm run on the same ...
4
votes
1answer
148 views

Restoring database from a hacked system

A linux VM with postgres 9.4 was hacked into. (Two processes taking 100% cpu, weird files in /tmp, did not reoccur after kill(s) and restart.) It was decided to install the system from scratch on a ...
4
votes
0answers
752 views

Hyper-V Sockets in 2016 version and host/guest communication

In new version of Hyper-V released recently with MS Windows Server 2016 contains a new functionality Hyper-V Sockets which allows for host/guest communication. It uses WinSock API with new address ...
1
vote
2answers
2k views

Is it safe to browse tor on a virtual machine using a non root user BUT the vm is using the host device's network card/adapter?

Sorry for the long title. I've been following this online course on ethical hacking and there was a part on how to set up VirtualBox and installing Kali Linux, as well as creating a USB Passthrough ...
5
votes
3answers
695 views

Is file shredding effective in a virtual machine?

I understand that people with a need to make sensitive data unrecoverable use file shredding to achieve it. This means writing over the physical areas of the storage media in more or less ...
3
votes
1answer
519 views

Does Linux “Dirty COW” Exploit allow for escalation outside a virtual machine?

Vulnerability CVE–2016–5195 deals with privilege escalation in Linux systems. In a virtual environment with hypervisor KVM and QEMU, can a virtual machine get access to it's host? If not, what is the ...
4
votes
1answer
857 views

Demonstrate a VM Escape

I have to demonstrate a VM Escape for a project. After some light research, I have found a vulnerability CVE-2014-0983 "Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities". ...
2
votes
1answer
835 views

CVE-2016-5195 - impacts on virtualization

I wonder if the recently found CVE-2016-5195 can be used to break out of KVM or OpenVZ virtualization to gain access to the host system? Basically, I believe that the local privileges can not be used ...
0
votes
1answer
997 views

Which is more secure? AMD DASH or Intel vPro

In term of overall security is AMD DASH or Intel vPro preferable? They both have: Hardware virtualization Remote Manageability Hardware-enhanced security etc... I can't really distinguish the ...
0
votes
2answers
161 views

Why VirtualBox Windows 7 guest machine is not supporting malware analysis [closed]

Recently, I downloaded some malware samples for incident response practice. Then I installed them in a VirtualBox Windows 7 guest machine, but they are not working properly. I disabled anti-virus ...
11
votes
2answers
2k views

What are the risks of antivirus exclusions for virtual machines’ files?

For performance reasons, I would like to whitelist the following files from an AV protection: .vmdk (VMWare virtual disk file); .lck (VMWare lock file for disk consistency, created in the same ...
0
votes
2answers
254 views

Is my machine safe?

I have a virtual machine with Windows 10 as its guest and Ubuntu 14.04 as its host. My router has its SPI firewall enabled, with only ports 22 and 80 being forwarded to the Ubuntu host. The Windows ...
6
votes
0answers
205 views

Penetration-resistance of a HaLVM unikernel

A HaLVM unikernel is a Haskell program compiled with a modified version of the Glasgow Haskell Compiler to produce a standalone Xen kernel, which will boot on any Xen PV machine instance. A HaLVM ...