CVE-2026-77178

Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet Am79C970A network device model...

attack_range

Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...

vboxdie-cracker

Crackeador de contraseñas de cifrado de imágenes de disco de Virtual Box Requisitos 1. PHP = 5.5.0 2. OpenSSL = 1.0.1 soporte XTS Descripción del algoritmo La contraseña del usuario se almacena usando una combinación de PBKDF2 y AES-XTS de la siguiente manera los valores mostrados están fijos por...

cuckooautoinstall

Sobre CuckooAutoinstall Cuckoo Sandbox . script de autoinstalación ¿Qué es Cuckoo Sandbox? Cuckoo Sandbox es un sistema de análisis de malware. ¿Qué significa eso? Significa que puedes lanzarle cualquier archivo sospechoso y obtener un informe con detalles sobre el comportamiento del archivo dent...

cuckooautoinstall

About CuckooAutoinstall Cuckoo Sandbox . auto install script What is Cuckoo Sandbox? Cuckoo Sandbox is a malware analysis system. What does that mean? It means that you can throw any suspicious file at it and get a report with details about the file's behavior inside an isolated environment. We...

VirtualBox-6.0.0-Exploit-1-day

VirtualBox 6.0.0 Exploit 1-day VBox bugs to be used CVE-2019-2525 : crUnpackExtendGetAttribLocation Information Disclosure CVE-2019-2548 : crServerDispatchReadPixels Integer overflow, leading to Heap overflow these bugs can be triggered when 3D Acceleration is enabled. First, before the...

RWCTF21-VirtualBox-61-escape

RWCTF21-VirtualBox-61-escape 0day VirtualBox 6.1 Escape for RealWorld CTF 2020/2021 Demo What? This is our solution for RealWorld CTF's "Box Escape" challenge from the 2020/2021 quals. Currently a 0day but we'll add the CVE number once there is one. CVE-2021-2119 How does it work? We wrote a...

vbox_cve_2017_10235

CVE-2017-10235: VirtualBox E1000 device buffer overflow Introduction The following document details a bug found in VirtualBox v5.1.22 now fixed in v5.1.24, in the guest device emulation component DevE1000 Intel 82540EM Ethernet Controller Emulation, in the function e1kFallbackAddToFrame, which...

metta

Metta Metta is an information security preparedness tool. This project uses Redis/Celery, python, and vagrant with virtualbox to do adversarial simulation. This allows you to test mostly your host based instrumentation but may also allow you to test any network based detection and controls...

antivmdetection

Antivmdetection Background A script to help you create templates, which you can use with VirtualBox to make VM detection harder. My first post on the subject was in 2012 and have after that been updated at random times. The blog format might have not been the best way of publishing the informatio...

virtualbox_e1000_0day

Why I like VirtualBox and it has nothing to do with why I publish a 0day vulnerability. The reason is my disagreement with contemporary state of infosec, especially of security research and bug bounty: 1. Wait half a year until a vulnerability is patched is considered fine. 2. In the bug bounty...

skf-flask

OLD and archived Security Knowledge Framework Please note that this is the archived version of SKF, we are busy building a brand new Security Knowledge Framework. For more updates please visit this github repo: https://github.com/Security-Knowledge-Framework/Platform...

CVE-2026-77178

Oracle VM VirtualBox versions prior to 7.2.8 are vulnerable to an out-of-bounds write in the host OS. The flaw is located within the pcnetReceiveNoSync function in DevPCNet.cpp, specifically affecting the PCNet (Am79C970A) network device model. This allows guest OS users to trigger the write. No ...

PT-2026-106731

Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet Am79C970A network device model...

CVE-2026-77178

Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet Am79C970A network device model...

EUVD-2026-93418

Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet Am79C970A network device model...

linux_screenshot_xwindows

Intro The goal of this volatility plugin is to extract a screenshot of all open X windows from a memory dump. Previous work The volatility plugin linuxxwindows realised by Adam Bridge https://github.com/bridgeythegeek/linuxxwindows extracts various metadata from the window objects registered to X...

cve-2023-21987-poc

cve-2023-21987-poc Oracle VirtualBox VGA OOB-Read Vulnerability This Proof of Concept PoC is designed for a Linux guest OS running on a Windows host OS. The purpose of this PoC is to demonstrate the ability to leak addresses of VirtualBox components. You may need to adjust the pointer values with...

VBoxCloak

VBoxCloak Un script de PowerShell que intenta ayudar a los analistas de malware a ocultar sus máquinas virtuales Windows de VirtualBox de malware que pueda estar intentando evadir el análisis. Garantizado para reducir tus puntuaciones de pafish al menos unos cuantos puntos ; El script logra esto...

MassCyberCenter-Mentorship-Project-

MassCyberCenter-Mentorship-Project- Overview This repository documents my journey and deliverables during the MassCyber Center mentorship program. This mentorship program tasked us with completing a cybersecurity project and then presenting it at a showcase event attended by cybersecurity...