15
votes
Accepted
Is a VM safe to run a simple virus on?
The default settings for most VMs will be sufficient for keeping everything isolated, that's what they're designed for.
The specific settings might be a little different depending on what software ...
- 301
12
votes
Accepted
Hashcat with Kali 2 in a VM
You must install some stuff. The same happened to me. But you can work with new hashcat 3.x and CPU in your vm, no problem on that:
apt-get install libhwloc-dev ocl-icd-dev ocl-icd-opencl-dev
And
...
- 5,245
10
votes
Jump Servers for security
What is the advantage of using jump servers for security reasons?
Jump servers, or more accurately, bastion hosts, provide a segregation layer between the target network and the user. Consider a ...
- 3,036
6
votes
Accepted
Can hackers compromise a VM to the point that they compromise your host OS?
There are cases where a VM can escape (to one degree or another) the virtualization environment and manipulate data outside of what it should be able to. This can mean that one guest VM can get code ...
- 677
6
votes
Accepted
Is VirtualBox safe and is it possible its spying on the user?
Both VirtualBox and VMWare are safe, reputable hypervisors. A website that looks "old" is not an indicator of malice, and sometimes the most reputable websites look very old indeed. VMWare ...
- 66.5k
5
votes
Accepted
Giving remote access via the VM, will compromise the network?
If your VM has access to the network and they can use it unsupervised then they of course have access to your network.
Also you really have to trust your VM-Product there.
What people do a lot (no ...
- 2,054
4
votes
Disguise System as VM
Could emulating a virtual environment stop some malware from infecting the system?
Yes. Also, creating fake VM artifacts is not the only way to stop malware from executing. You could also create fake ...
- 51
3
votes
Is VM escape has the same severity as me getting in a car crash?
Depends on your threat model
VM escape vulnerabilities are, in general, rare compared to other classes of vulnerabilities - there are less such vulnerabilities found each year than e.g. critical ...
- 8,419
3
votes
Accepted
Can I use Qubes through a VM without compromising its security?
Using Qubes through VM is all about compromising security. Qubes is unique for its Xen kernel which is perfect for sandboxing and written with less code (fewer security holes).
In Qubes, if you ...
- 237
3
votes
Detect a Virtual Machine on my Wifi?
Maybe you can look at their MAC address. For example, by default, VirtualBox begins theirs MAC address by 08002xxxx.
The lists of couple address MAC - constructors
https://support.microsoft.com/fr-fr/...
- 605
3
votes
Can I check if ransomware is running by using a VM
Ransonware will only encrypt files, they don't decrypt. That task is executed by the decryptor that you will buy from the ransomware authors later. The undefined period is only to force you to rush ...
- 53.5k
2
votes
Hashcat with Kali 2 in a VM
You can use hashcat legacy for that, it's built to run on CPUs rather than GPUs.
https://hashcat.net/wiki/doku.php?id=frequently_asked_questions
- 589
2
votes
Security vulnerabilities when sharing files between virtual machine and host
As MiatoHatola pointed out, moving possibly infected files from the VM to the host system exposes the host to all the dangers the VM is exposed to. You can migitate that danger, for example by ...
- 9,253
2
votes
Accepted
Security of external harware when using VMs
Think of a hardware based host as a fisk tank. Immagine that the virtual host is a smaller fish tank that sits inside the larger fish tank. You can add fish to your fish tank: either to the larger ...
- 8,833
2
votes
Can I use Qubes through a VM without compromising its security?
"Note: Qubes OS is not meant to be installed inside a virtual machine
as a guest hypervisor. In other words, nested virtualization is not
supported. In order for a strict compartmentalization to ...
- 121
2
votes
Is a VM safe to run a simple virus on?
To prevent the virus from escaping the VM's virtualized hard disk, you'll need to make sure you don't connect the VM and host file systems (no "shared drives" or "shared files" or anything). You ...
- 46.3k
2
votes
Hardening VM for Malware Analysis
Setting the network adapter to host-only does not truly isolate the malware. The malware could spread to your host over the host-only network, and then it can spread from your host to the rest of the ...
- 3,942
2
votes
Accepted
Which information of a VMware image can be monitored from the host?
Which information (e.g. https traffic) can be monitored from the host? Is it safe to browse on a virtual machine that uses the host device's network adapter (regarding privacy)?
The host has full ...
- 15.4k
1
vote
Hardening VM for Malware Analysis
FlareVM is a good starting point.
https://www.fireeye.com/blog/threat-research/2017/07/flare-vm-the-windows-malware.html
https://github.com/fireeye/flare-vm
Also make sure you make your harden ...
- 1,012
1
vote
Giving remote access via the VM, will compromise the network?
You need to manage through your VM's vNICs, make sure you don't use a bridge adapter but a NAT one and with single NIC remove all routes to the network but the actual default gateway.
That being said,...
- 26
1
vote
Virtual machine and viruses
So long as you use VMware with care it should prevent malware from affecting your host machine. That is unless the malware has a VM to host escape exploit, but they are relatively rare.
Some ...
- 186
1
vote
Why does Ettercap scan the wrong hosts?
It looks like your eth0 connection on your Kali VM has its network adapter setup incorrectly and is actually using your host machine's network (192.168.128.*).
You need to make sure that your VMs ...
- 619
1
vote
Accepted
Is DHCP spoofing ever possible on VMware?
Short answer is no, you can't.
If your vm network adapter is NAT, your rogue DHCP server is only on natted network. To test if machines from your host's network are taking ip from your rogue DHCP ...
- 5,245
1
vote
Accepted
Security vulnerabilities when sharing files between virtual machine and host
From my understanding, you would most likely be just fine by sharing a single folder between the Host and Guest operating systems.
For a malicious program to act on more than just the files within ...
- 94
1
vote
Accepted
Encrypting guest VM on ESXI with Veracrypt
If you want to encrypt the guest machines, then you can use veracrypt, but consider the performance impact. This way though you will need to enter a password every time the guest is restarted.
The ...
- 291
1
vote
Accepted
Does my host machine stay completely safe if I'm browsing the dark web using virtual box or vmware on bridge network connection?
There have been attacks hosts with non-ECC ram through their virtual machine. The attackers were able to pass commands to the host computer by manipulating the VM memory.
http://www.darkreading.com/...
- 85
1
vote
Accepted
Best way to keep anonymity inside a VM
If I use a proxy shield inside a VM and spoof my IP address, is there
any possibility that someone else ( victim ) can identify the host
machine's IP and other details?
Yes. Except very specific ...
- 22.8k
1
vote
Best way to keep anonymity inside a VM
Your VM can be thought of as a part of your system or a separate interface on it depending on how you configure it.
If it's configured to share the host's IP, then all the traffic sent out will exit ...
- 3,394
1
vote
Jump Servers for security
What is the advantage of using jump servers for security reasons?
My understanding of this is that in general, it allows you to minimize attack surface thus making an attack harder. This is because ...
- 507
Only top scored, non community-wiki answers of a minimum length are eligible