Questions tagged [vmware]

A company that develops cloud and virtualization software and services. Mostly known for their desktop softwares Workstation, Player and Fusion, their server software ESXi and the cloud IaaS product vCloud.

Filter by
Sorted by
Tagged with
0
votes
0answers
5 views

Change Desktop Resolution for Kali Linux for once [migrated]

I am preparing for my OSCP exam and I have learned that it is best to use PWK Kali Image offered by the Offensive Security team. Since it is installed in a VMware Player, I can't take a snapshot of ...
1
vote
2answers
72 views

Hardening VM for Malware Analysis

I'm starting out in Malware Research / Malware Analysis. I am reading a book called "Practical Guide to Malware Analysis," which touches this in the 2nd chapter, before approaching Dynamical Analysis (...
0
votes
0answers
39 views

LUKS partition encryption vs. .vmdk level encryption

Because of data classification that is stored on one of our servers we need to make sure that it is protected while in transit and at rest. While the first can be addressed with proper TLS ...
0
votes
0answers
63 views

Why is Zone Alarm Blocking VMWare Virtual Network Editor?

I have version 15 of VMWare running on my Windows 10 computer. When I open the Virtual Network Editor and try to add a bridged connection, I get an error saying: Cannot change network to bridged: ...
0
votes
1answer
116 views

Is VM escape has the same severity as me getting in a car crash? [closed]

I'm exploring the threats for VDIs on VMware, based on the article it seems the risk for VM escape has low severity as described here:http://vmescape.com/index.html Did we forget the discussion of ...
2
votes
0answers
94 views

What security isolation exists between VDI instance to VMware Horizon to ESX?

I read about malware that was able to escape the VM and get to the VMware Horizon host and then to hypervisor ESX, but I am not sure what security controls exist to prevent malware from jumping to ...
2
votes
3answers
293 views

Malware Analysis

What would be a good approach for testing malware or bad url's from things picked up from my SIEM to validate them? I was told to setup a VM for these tests but don't want it to hit the internal ...
2
votes
0answers
70 views

Transferring A VM Image To Someone, Privacy Concern

Im setting up a Windows 7 VM and will be optimizing / setting up a suite of proprietary software/settings including a VPN. I will also be connecting this VM to the internet (through a VPN) from my ...
1
vote
0answers
2k views

Nmap only detect virtual hosts and not physical hosts (maybe segmented network)

When my network settings is set to NAT and interface is eth0, this is the output of a simple nmap scan root@pc:~# nmap 192.168.0.0/24 Starting Nmap 7.60 ( https://nmap.org ) at 2018-03-04 18:47 EST ...
2
votes
1answer
361 views

Security Onion VMWare + OpenWRT IPTables Mirroring

I'm trying to set up SO in my home network to lab and see if I can monitor all ingress/egress traffic from my SOHO router. I don't have a switch with SPAN ports, or a network tap so I'm using OpenWRT ...
0
votes
1answer
958 views

Can hackers compromise a VM to the point that they compromise your host OS? [duplicate]

Recently I was reading up on various security strategies and one that has been around for a while but is starting to gain traction now is working within a VM on your desired OS. If that VM ever gets ...
1
vote
0answers
698 views

php-reverse-shell in Wordpress can't connect to netcat

I am accessing an intentionally vulnerable VM hosting an older version of Wordpress. I have admin access to the Wordpress site and have been trying to use pentestmonkey's php-reverse-shell script to ...
3
votes
3answers
19k views

Is a VM safe to run a simple virus on? [duplicate]

I just made a very simple batch virus that runs itself and runs on startup. I want to test it because I want to send it to a YouTuber who films himself running these viruses on a Virtual Machine. The ...
2
votes
2answers
90 views

Giving remote access via the VM, will compromise the network?

I am currently working on a project for one of the organization and I have to install a new (server/client)software program.However, the software company would like to help and install for themselves ...
1
vote
1answer
679 views

Virtual machine and viruses

I have a 1tb hdd and I have installed windows 10 on 600gb and the rest space, I have given to kali Linux. I want to install vmware in kali Linux and test Malware samples. So if the virus does ...
3
votes
1answer
112 views

Security of external harware when using VMs

I'm new to using VMs, so I suspect this question may answer itself with experience, however, this question has been bugging me. If a computer user has a VM set up, and plugs in a pen drive, what's ...
0
votes
1answer
2k views

Why does Ettercap scan the wrong hosts?

Details: I'm running three virtual machines on VMware Workstation: Virtual Machine 1: Windows 7. Using static ip: 10.1.1.1 Virtual Machine 2: Windows server 2008. Using static ip 10.1.1.2 Virtual ...
2
votes
2answers
329 views

Is DHCP spoofing ever possible on VMware?

So I've just watched this Defcon video:https://www.youtube.com/watch?v=RaA5dEIqzzQ&t=1583s. Apparently they were able to set up a rouge DHCP server and get a 50/50 chance of sending the victim the ...
4
votes
0answers
2k views

Windows XP SP3 vulnerable iso to ms_08_067 [closed]

I am following Georgia Weidman book - Penetration Testing A Hands-On Introduction to Hacking. In her book, a Windows XP SP3 iso vulnerable to ms_08_067 is needed. I have an XP VM, but looks like this ...
3
votes
2answers
678 views

Security vulnerabilities when sharing files between virtual machine and host

According to this link, when running a windows OS virtual machine on a windows host OS, one can share files like one would share files between two computers on a network by ensuring that file sharing ...
2
votes
1answer
810 views

Encrypting guest VM on ESXI with Veracrypt

Hi we're using an ESXI box to host some VM's locally on our network. We're devs and we just want things like UAT servers. We've encrypted with Veracrypt: Bitlocker was out as ESXI can't see the TPM. ...
1
vote
1answer
965 views

Does my host machine stay completely safe if I'm browsing the dark web using virtual box or vmware on bridge network connection? [duplicate]

I'm just asking if my host machine stays safe when browsing the dark web darknet using Tor on a virtual machine with bridge connection through the host machine ? Since the virtual machine will be ...
7
votes
4answers
28k views

Hashcat with Kali 2 in a VM

How can I run hashcat using only the cpu in a virtual machine? When I try to run hashcat in my Kali 2 VM I receive the following error: root@kali: hashcat -m 400 -a 0 hash.txt rockyou.txt hashcat (...
-1
votes
3answers
2k views

Best way to keep anonymity inside a VM

If I use a proxy shield inside a VM and spoof my IP address, is there any possibility that someone else ( victim ) can identify the host machine's IP and other details? What is the best way that we ...
2
votes
1answer
652 views

Can I use Qubes through a VM without compromising its security?

Like the title says, will using Qubes through a VM compromise its security aspects in any way? Is it "mandatory" to install it properly (like in a dual-boot enviroment) or can I achieve the same ...
1
vote
1answer
98 views

What is the most secure way to access clients' VPNs?

I'm looking to provide our clients with a secure way we can connect to their VPN when performing software services. The issue is security. We want to make them feel at ease that we are connecting to ...
5
votes
3answers
7k views

Jump Servers for security

In my network, I have the clients directly connected to the server; but in the new PCI policies, they required to use jump servers. What is the advantage of using jump servers for security reasons? ...
1
vote
0answers
75 views

VMWare security advisories in CVRF [closed]

I'm developping a crawler for security advisories and i wanted to crawl the VMWare website. I know that there is a list of security advisories here : https://www.vmware.com/security/advisories/ but ...
6
votes
4answers
509 views

Building an info sec VM lab - safe to keep on my home network?

I'm a new member making my first post here. I had a very quick, and admittedly basic, question. I'm setting up an info sec lab for the first time at home. I'm trying to build some more technical ...
2
votes
1answer
758 views

How to securely delete full vm

We have a Windows 7 virtual machine on VMware Workstation 11. The VM is now encrypted (using Workstation) but wasn’t always. The VM has confidential information on it and as we no longer need it, we ...
1
vote
1answer
58 views

Virtulization in cloud and security

From a security perspective, which type of hyper-visor cloud is more secure - one that runs on bare-metal (using minimal boot strap build into hyper-visor) or one which is loaded as a part of the OS ...
1
vote
0answers
695 views

Network configuration for Security Onion on VMWare ESX

I'm setting up an IDS using Security Onion on VMWare ESX. I have a VLAN from the (physical) switch which has the network SPAN port; this is feeding into the ESX virtual switch, and this port group is ...
0
votes
1answer
806 views

I can't connect to OSSIM server [closed]

I installed OSSIM in VMware workstation.The installation was successful.But when I entered the login and the password I have this message " incorrect login" I know that la login must be "root". ...
2
votes
1answer
85 views

Detect a Virtual Machine on my Wifi?

Is there a way to detect whether a machine connected to my wifi is a physical machine or a virtual machine?
1
vote
3answers
1k views

How can I create a research botnet within VMware?

For educational purposes I am attempting to create a botnet within VMware making use of 3 or 4 machines (So I can attack a 5th virtual machine using this botnet), but the issue I'm facing is I can't ...
1
vote
1answer
189 views

EMET disable DEP on IE for specific site

I'm a new user of EMET. I wanted to know if there is anyway to avoid DEP on IE for a specific site. I want to do this because I use VMware remote server and when I start a remote console, EMET starts ...
1
vote
1answer
273 views

Nmap write output only when all scanned ports are open

Can anyone tell me how, or if it possible to get nmap to write output to a file if ALL of the ports defined in the scan are open? Such as in a boolean & statement - i.e. 636 & 902 & 5989 ...
1
vote
0answers
93 views

Restricting VMware View Copy/Paste Functionality

Does anybody know if it's possible to restrict VMware View copy/paste functionality depending on the source of the client? It seems VDIs can have GPOs set to configure copy/paste functionality, but ...