[SOLVED] if attacker compromises virtualbox guest win7 ...

////// · 04-28-2015, 06:06 AM

...does he have easy access to host system (fedora 22 64 bit) ?

i am asking this cus i run win7 guest to run diablo 2 bots and sometimes download game hacks / mods that could be trojaned.

veerain · 04-28-2015, 06:16 AM

Ideally not. But bugs in VirtualBox may let it happen.

rokytnji · 04-28-2015, 08:11 AM

Anything is possible.

But.

If it was possible. I am sure it would be all over the net. From my understanding. Windows in VM is in the back of the bus and cannot effect the driver.

Edit:

Quote:

easy access

Naw.

Found this;

Quote:

Had I run my laptop on the original Windows 7, i would have been stuck (to avoid a suitable four letter word). Luckily, the XP box is only a virtual machine running on my Linux openSUSE 12.1 laptop, and I remembered I had made a backup of my data including my virtual machines only two weeks ago. Since I had only installed two minor pieces of software since then, I simply dug up the external hard drive, copied the 50GB backup over the infested machine in less than half an hour, et voil!

I am running an openSUSE 12.1 Linux on my laptop (Fujitsu Lifebook A Series), and installed Oracles VirtualBox on it. VirtualBox is a very powerful x86 and AMD64/Intel64 virtualisation software which is freely available as Open Source Software (GNU General Public License GPL version 2). It runs on Windows, Linux, Macintosh, and other OSes many so-called guest operating systems, such as most flavours of Windows (DOS/Windows 3.x, NT 4.0, 2000, XP, Vista, Windows 7), Linux, OS/2(!) and others (see screenshots).

Resurrected: my Windows XP box

Simply spoken, Virtualbox is a piece of software running on a host operating system and pretending to be a PC. If you have the suitable installation media, you can install your favourite or second most needed operating system into the software. Virtualbox creates a virtual harddisk from which the guest operating system can boot and run.

As I have become used to working with MS Office for the past 20 years or so, and other software refuses to work on Linux or Wine (the native Linux Windows emulator) and runs only on Seattle based OSes, I cannot afford to abstain from Windows completely. But now I am where I dreamed of being 20 years ago, when I installed my first Linux on a PC (Slackware with kernel 0.99.15).

Virtualbox virtually saved my day.

Oh, and just in case you are wondering, I also have a virtual box running Widows 7 with all my stuff that runs nicely on a 64 bit Windows. .

http://desastre.eu/software-recommendations/virtualbox/

////// · 04-28-2015, 08:32 AM

thanks for replies.

i find it very little risk that some skiddie that trojaned some game files would know some virtualbox zerodays

the thing is that i dont see any rogue connections from my guest os at my hardware firewall box (pfsense) so i can live at peace.

later, //////