Collaborate Disseminate
I am penetration tester. I am struggling to check for UNC path injections in the web apps because of the environment that I am in. I am conducting a pentest of a web app in my company’s local network. I am using a Windows 10 Host machine a… Continue reading UNC Path Injection Testing over NAT
I am penetration tester. I am struggling to check for UNC path injections in the web apps because of the environment that I am in. I am conducting a pentest of a web app in my company’s local network. I am using a Windows 10 Host machine a… Continue reading UNC Path Injection Testing over NAT
Context:
I want to do a reverse shell POC, so I am using Kali Linux on virtual box hosted on a Windows machine. On the same network my Windows machine hosted, there is a Linux machine that I want to gain a reverse shell on it. Before doing… Continue reading how to make my vm reachable from hosts within same network [migrated]
I’m using VirtualBox 7 on Windows 11.
How secure is their disk image encryption?
Where is the encryption key stored?
If a third party gets access to the computer when the VM is turned off, what are the attack vectors?
First of all, I must say that I’m using a VM with an emulated TPM 2.0.
I’ve created an LUKS2 encrypted partition and configured the TPM 2.0 to unseal the key only if the PCR 7 has a certain value.
For what I’ve understood so far in the PCR… Continue reading PCR 7 in TPM 2.0 has always the same value
steps to reproduce:
Insert PFSense as iso.
Bootoad from iso in virtual box
Expected:
Install screen is loaded
https://www.youtube.com/watch?v=LX-Y-99zJ3M
Actual:
Screen with list command without install option is loaded
Continue reading PFSense virtual box installation broken [migrated]
I have to transfer some files such as movies, TV series and other large stuff (so I can not to use a cloud) from a virtual machine to the host. I read that an infected virtual machine can spread malware to the host using the shared folder,… Continue reading How to transfer files from a virtual machine to the host without risking getting infected?
Host: Win10
Guest: Linux
Software: VirtualBox
Clipboard information might not seem important, but it could very well contain a copied password or other useful data. On the host, clipboard history is also turned on. In VB, both clipboard an… Continue reading Can guest access host clipboard despite sharing turned off?
For many years, I have been running untrusted programs in VMs.
I have used both Windows and Linux as the host OS, and both (many versions of) VMware Workstation Player and VirtualBox on both OSes. The VMs ("guest OS") have been b… Continue reading When exactly do VMs receive the shared clipboard data in VMware/VirtualBox?
I’m trying to access to access to my RDP on Whonix (over Tor and despite all dangers) this way
rdesktop myip
but I’m always getting error
Autoselecting keyboard map ‘en-us’ from locale Core(error):
tcp_recv(), recv() failed: Connection … Continue reading RDP Access on Whonix [migrated]