Questions tagged [vmware]
A company that develops cloud and virtualization software and services. Mostly known for their desktop softwares Workstation, Player and Fusion, their server software ESXi and the cloud IaaS product vCloud.
55
questions
0
votes
0
answers
81
views
How to harden VMware for malware analysis? [duplicate]
I’m looking for answers specific to VMware Workstation Pro 17.5.2. in 2024, not answers about other VM softwares.
On Windows 11, how can I harden a VM in VMware Workstation Pro 17.5.2 so that malware ...
- 21
0
votes
0
answers
167
views
Cracking 1000-password assignment from hashed file
OS: Ubuntu 20.04 on VMWare, tool: John the ripper
The whole system is up-to-date
The file has 1000 hashed passwords. There are 40 rules provided, a small word list is provided to help crack part of ...
1
vote
1
answer
282
views
Which is more secure to access a VMware Windows VM : VMware Remote console or RDP+Remote Desktop Gateway
Without knowing more details, I can't suggest to our security guy that we should use RDP along with a Remote Desktop Gateway.
One person says to that VMware Remote Console is more secure than using ...
- 111
1
vote
1
answer
286
views
How to make a virtual machine forensics-proof - completely or to the maximum possible level?
I want to make a VMWare (VMWare is first preference but any alternative can be used as well) virtual machine completely digital forensics-proof. I am protecting against someone getting physical access ...
- 139
2
votes
1
answer
426
views
Does connecting a virtual machine to a guest wifi connection protect the host machine from potential malware if it is connected to the main network?
I have a windows 10 host machine that is connected to my LAN with other devices. It runs a VMware Ubuntu virtual machine that is connected to the guest wifi and has shared folders between vm and host ...
- 21
0
votes
0
answers
64
views
TLS: should a server return the complete certificate chain? [duplicate]
I'm running a private CA for testing purposes. I have my root CA cert, an intermediate CA cert, and some server certificates. Clients have the root CA cert installed as trusted.
It's not clear to me ...
- 101
0
votes
0
answers
32
views
secure deletion in virtual machines [duplicate]
when we securely delete a volume in a machine which is installed in a virtual machine or docker, for example by overwriting 7 times or more, we securely delete the data in virtual disk (in guest) and ...
- 1
1
vote
0
answers
116
views
installed windows 2003 in VMware cant get internet to work [closed]
I have installed Windows 2003 server in VMWare and cannot seem to get the internet to work. It says it is connected to the internet in the box in the icon bar and when I run ipconfig it returns with ...
- 597
0
votes
0
answers
155
views
Can a host be accessed when using a VM on a network?
If I use a VM on a laptop which is connected to a work or public wifi, can the host machine be accessed by anyone also connected to wifi?
I'm thinking along the lines of if I were to use my laptop on ...
- 111
2
votes
1
answer
6k
views
Is VirtualBox safe and is it possible its spying on the user?
I'm looking to install a virtual machine and since Hyper-V is not available for my Windows 10 production version I'm forced to decide between VirtualBox and VMWare. VMWare looks much more modern and ...
- 43
0
votes
0
answers
164
views
How to secure home environment when testing vulnerable VMs
I'd like to practice CTFs and cyber attacks on vulnerable VMs downloaded from seemingly reputable sources.
Which are the basic guidelines for securing the environment and avoid that malware (if any) ...
- 129
0
votes
1
answer
140
views
Which information of a VMware image can be monitored from the host?
I run a Linux virtual machine on my Windows 10 host.
What information (e.g. https traffic) can be monitored from the host?
Is it safe to browse on a virtual machine that uses the host device's network ...
- 103
-1
votes
2
answers
238
views
Can I check if ransomware is running by using a VM [closed]
I am not an expert, but as far as I understand, ransomware will encrypt files and (for an undefined period) decrypt as well, so it appears all is well. At some point in time, the decrypting ends and ...
- 1
1
vote
2
answers
395
views
Secure a virtual machine during a lab exercise
I recently started the Offensive Security AWAE course.
On their connectivity guide page, they warn about the hazards of connecting to their labs:
you will be exposing your computers' VPN IP to other ...
- 850
-1
votes
1
answer
315
views
Can ransomware detect Virtual Environments?
My title says it all but here is a scenario:
I download a suspicions file and run it inside a VM.If everything works, I will deploy it to my original PC.
I plan to use these:
1.Oracle VM
2.Vmware
3....
- 103
1
vote
0
answers
205
views
How should I install Kali Linux on my Windows 10?
I'm using Windows 10. I found several ways to install Kali Linux on Win10:
Install it on VMWare
Install it on Docker
Install it on Linux subsystem (WSL)
I might need to access some files in my ...
- 11
4
votes
1
answer
397
views
Disguise System as VM
Malware sometimes uses anti-vm and anti-sandbox behavior to act like harmless software.
Wouldn't it be a good prevention strategy to disguise the host machine as a VM so that potential malware would ...
- 41
0
votes
1
answer
250
views
Dealing with File Permissions from a Virtual Machine - Forensic Logical Acquisition
I am currently in the middle of operating an analysis on Autopsy of a virtual machine (VMware) that has been hacked. I have mounted the VM and I am acquiring the evidence from VMware to my physical ...
- 73
1
vote
2
answers
2k
views
How to configure a VM to protect all my hardware fingerprint from guest OS and softwares?
This question was originally Does Firefox in VM have a common enough fingerprint so I don't need tor browser? in Tor community.
I want to know about what a web browser's fingerprint like in a VM, ...
- 141
0
votes
0
answers
392
views
Forensic image of hard disk on VMWare using Autopsy
Is there a recommended, forensically sound method of acquiring virtual hard drives on VMWare using Autopsy? Or is it a simple copy and paste?
I’ve used other software like Caine in the past, where ...
- 73
2
votes
2
answers
3k
views
Hardening VM for Malware Analysis
I'm starting out in Malware Research / Malware Analysis. I am reading a book called "Practical Guide to Malware Analysis," which touches this in the 2nd chapter, before approaching Dynamical Analysis (...
- 21
1
vote
1
answer
480
views
Why is Zone Alarm Blocking VMWare Virtual Network Editor? [closed]
I have version 15 of VMWare running on my Windows 10 computer.
When I open the Virtual Network Editor and try to add a bridged connection, I get an error saying:
Cannot change network to bridged: ...
- 111
1
vote
1
answer
452
views
Is VM escape has the same severity as me getting in a car crash? [closed]
I'm exploring the threats for VDIs on VMware, based on the article it seems the risk for VM escape has low severity as described here:http://vmescape.com/index.html
Did we forget the discussion of ...
- 1,294
6
votes
0
answers
234
views
What security isolation exists between VDI instance to VMware Horizon to ESX?
I read about malware that was able to escape the VM and get to the VMware Horizon host and then to hypervisor ESX, but I am not sure what security controls exist to prevent malware from jumping to ...
- 1,294
2
votes
0
answers
176
views
Transferring A VM Image To Someone, Privacy Concern
Im setting up a Windows 7 VM and will be optimizing / setting up a suite of proprietary software/settings including a VPN. I will also be connecting this VM to the internet (through a VPN) from my ...
- 21
1
vote
0
answers
6k
views
Nmap only detect virtual hosts and not physical hosts (maybe segmented network)
When my network settings is set to NAT and interface is eth0, this is the output of a simple nmap scan
root@pc:~# nmap 192.168.0.0/24
Starting Nmap 7.60 ( https://nmap.org ) at 2018-03-04 18:47 EST
...
- 39
2
votes
1
answer
837
views
Security Onion VMWare + OpenWRT IPTables Mirroring
I'm trying to set up SO in my home network to lab and see if I can monitor all ingress/egress traffic from my SOHO router. I don't have a switch with SPAN ports, or a network tap so I'm using OpenWRT ...
- 21
2
votes
1
answer
4k
views
Can hackers compromise a VM to the point that they compromise your host OS? [duplicate]
Recently I was reading up on various security strategies and one that has been around for a while but is starting to gain traction now is working within a VM on your desired OS. If that VM ever gets ...
- 123
1
vote
0
answers
1k
views
php-reverse-shell in Wordpress can't connect to netcat
I am accessing an intentionally vulnerable VM hosting an older version of Wordpress. I have admin access to the Wordpress site and have been trying to use pentestmonkey's php-reverse-shell script to ...
- 21
8
votes
3
answers
70k
views
Is a VM safe to run a simple virus on? [duplicate]
I just made a very simple batch virus that runs itself and runs on startup. I want to test it because I want to send it to a YouTuber who films himself running these viruses on a Virtual Machine.
The ...
- 83
2
votes
2
answers
183
views
Giving remote access via the VM, will compromise the network?
I am currently working on a project for one of the organization and I have to install a new (server/client)software program.However, the software company would like to help and install for themselves ...
- 197
1
vote
1
answer
2k
views
Virtual machine and viruses
I have a 1tb hdd and I have installed windows 10 on 600gb and the rest space, I have given to kali Linux. I want to install vmware in kali Linux and test Malware samples. So if the virus does ...
- 11
3
votes
1
answer
282
views
Security of external harware when using VMs
I'm new to using VMs, so I suspect this question may answer itself with experience, however, this question has been bugging me.
If a computer user has a VM set up, and plugs in a pen drive, what's ...
- 133
0
votes
1
answer
5k
views
Why does Ettercap scan the wrong hosts?
Details:
I'm running three virtual machines on VMware Workstation:
Virtual Machine 1: Windows 7. Using static ip: 10.1.1.1
Virtual Machine 2: Windows server 2008. Using static ip 10.1.1.2
Virtual ...
- 23
2
votes
2
answers
730
views
Is DHCP spoofing ever possible on VMware?
So I've just watched this Defcon video:https://www.youtube.com/watch?v=RaA5dEIqzzQ&t=1583s.
Apparently they were able to set up a rouge DHCP server and get a 50/50 chance of sending the victim the ...
- 439
4
votes
0
answers
3k
views
Windows XP SP3 vulnerable iso to ms_08_067 [closed]
I am following Georgia Weidman book - Penetration Testing A Hands-On Introduction to Hacking. In her book, a Windows XP SP3 iso vulnerable to ms_08_067 is needed. I have an XP VM, but looks like this ...
- 43
4
votes
2
answers
2k
views
Security vulnerabilities when sharing files between virtual machine and host
According to this link, when running a windows OS virtual machine on a windows host OS, one can share files like one would share files between two computers on a network by ensuring that file sharing ...
2
votes
1
answer
1k
views
Encrypting guest VM on ESXI with Veracrypt
Hi we're using an ESXI box to host some VM's locally on our network. We're devs and we just want things like UAT servers. We've encrypted with Veracrypt:
Bitlocker was out as ESXI can't see the TPM.
...
- 1,011
1
vote
1
answer
2k
views
Does my host machine stay completely safe if I'm browsing the dark web using virtual box or vmware on bridge network connection? [duplicate]
I'm just asking if my host machine stays safe when browsing the dark web darknet using Tor on a virtual machine with bridge connection through the host machine ? Since the virtual machine will be ...
- 113
9
votes
4
answers
47k
views
Hashcat with Kali 2 in a VM
How can I run hashcat using only the cpu in a virtual machine?
When I try to run hashcat in my Kali 2 VM I receive the following error:
root@kali: hashcat -m 400 -a 0 hash.txt rockyou.txt
hashcat (...
- 355
-1
votes
3
answers
12k
views
Best way to keep anonymity inside a VM
If I use a proxy shield inside a VM and spoof my IP address, is there any possibility that someone else ( victim ) can identify the host machine's IP and other details?
What is the best way that we ...
- 1,317
1
vote
2
answers
3k
views
Can I use Qubes through a VM without compromising its security?
Like the title says, will using Qubes through a VM compromise its security aspects in any way? Is it "mandatory" to install it properly (like in a dual-boot enviroment) or can I achieve the same ...
- 329
1
vote
1
answer
171
views
What is the most secure way to access clients' VPNs?
I'm looking to provide our clients with a secure way we can connect to their VPN when performing software services.
The issue is security. We want to make them feel at ease that we are connecting to ...
- 155
7
votes
3
answers
12k
views
Jump Servers for security
In my network, I have the clients directly connected to the server; but in the new PCI policies, they required to use jump servers.
What is the advantage of using jump servers for security reasons?
...
- 89
1
vote
0
answers
188
views
VMWare security advisories in CVRF [closed]
I'm developping a crawler for security advisories and i wanted to crawl the VMWare website.
I know that there is a list of security advisories here : https://www.vmware.com/security/advisories/ but ...
- 11
6
votes
4
answers
836
views
Building an info sec VM lab - safe to keep on my home network?
I'm a new member making my first post here. I had a very quick, and admittedly basic, question. I'm setting up an info sec lab for the first time at home. I'm trying to build some more technical ...
- 61
2
votes
1
answer
2k
views
How to securely delete full vm
We have a Windows 7 virtual machine on VMware Workstation 11. The VM is now encrypted (using Workstation) but wasn’t always. The VM has confidential information on it and as we no longer need it, we ...
- 57
1
vote
1
answer
122
views
Virtulization in cloud and security
From a security perspective, which type of hyper-visor cloud is more secure - one that runs on bare-metal (using minimal boot strap build into hyper-visor) or one which is loaded as a part of the OS ...
- 1,612
1
vote
0
answers
1k
views
Network configuration for Security Onion on VMWare ESX
I'm setting up an IDS using Security Onion on VMWare ESX. I have a VLAN from the (physical) switch which has the network SPAN port; this is feeding into the ESX virtual switch, and this port group is ...
- 11
0
votes
1
answer
2k
views
I can't connect to OSSIM server [closed]
I installed OSSIM in VMware workstation.The installation was successful.But when I entered the login and the password I have this message " incorrect login" I know that la login must be "root".
...
- 3