Lucene search
K

Solaris Gather Virtual Environment Detection

🗓️ 14 Jun 2011 00:50:33Reported by Carlos Perez <[email protected]>Type 
metasploit
 metasploit
🔗 www.rapid7.com👁 31 Views

Solaris Gather Virtual Environment Detection module attempts to determine whether the system is running inside of a virtual environment like Solaris Zone, VMWare, VirtualBox, Xen, and QEMU/KVM

Code
##
# This module requires Metasploit: https://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##

class MetasploitModule < Msf::Post
  include Msf::Post::File
  include Msf::Post::Solaris::Priv

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'Solaris Gather Virtual Environment Detection',
        'Description' => %q{
          This module attempts to determine whether the system is running
          inside of a virtual environment and if so, which one. This
          module supports detection of Solaris Zone, VMWare, VirtualBox, Xen,
          and QEMU/KVM.
        },
        'License' => MSF_LICENSE,
        'Author' => [ 'Carlos Perez <carlos_perez[at]darkoperator.com>'],
        'Platform' => [ 'solaris' ],
        'SessionTypes' => [ 'shell' ]
      )
    )
  end

  # Run Method for when run command is issued
  def run
    print_status('Gathering System info ....')
    vm = nil
    kernel_type = cmd_exec('uname -v')

    if kernel_type =~ /Generic_Virtual/i
      vm = 'Solaris Zone'
    end

    if !vm

      prt_diag = cmd_exec('/usr/sbin/prtdiag -v').gsub("\n", ' ')

      case prt_diag
      when /virtualbox/i
        vm = 'VirtualBox'
      when /vmware/i
        vm = 'VMware'
      when /xen/i
        vm = 'Xen'
      when /qemu/i
        vm = 'Qemu/KVM'
      end
    end

    if vm
      print_good("This appears to be a #{vm} Virtual Machine")
    else
      print_status('This appears to be a Physical Machine')
    end
  end

end

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

08 Feb 2023 13:47Current
6.9Medium risk
Vulners AI Score6.9
31