antivmdetection

Antivmdetection Background A script to help you create templates, which you can use with VirtualBox to make VM detection harder. My first post on the subject was in 2012 and have after that been updated at random times. The blog format might have not been the best way of publishing the informatio...

vbox-vmdk-sparse-extent

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · vbox-vmdk-sparse-extent vbox-vmdk-sparse-extent Class: File read Reach: Local host UI:R Oracle VM VirtualBox OSS 7.2.20 f2792cf44 - Oracle A host user who imports an OVF directory or OVA whose disk is a sparse VMDK...

vbox-lsilogic-sas-config

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · vbox-lsilogic-sas-config vbox-lsilogic-sas-config Class: Type confusion / arb R/W Reach: Local guest Oracle VM VirtualBox OSS 7.2.20 f2792cf44f663989818507e36d3db5f978523c5e SAS1068 MPT CONFIG treats SCSI-SPI Port 0 a...

Exploiting-and-Mitigating-CVE-2020-0796-SMBGhost-and-Print-Spooler-Vulnerabilities

Exploiting-and-Mitigating-CVE-2020-0796-SMBGhost-and-Print-Spooler-Vulnerabilities This repository contains detailed documentation and code related to the exploitation, detection, and mitigation of two significant vulnerabilities: CVE-2020-0796 SMBGhost and Print Spooler. The repository showcases...

CVE-2024-21111

CVE-2024-21111 Oracle VirtualBox Prior to 7.0.16 is vulnerable to Local Privilege Escalation via Symbolic Link Following leading to Arbitrary File Delete and Arbitrary File Move. VirtualBox attempts to move log files as NT AUTHORITY\SYSTEM in C:\ProgramData\VirtualBox which all users can write to...

ricerca-tesi

thesis-research research resources for cve-2026-7228 Tools VirtualBox installation VirtualBox installation: https://www.virtualbox.org/wiki/Downloads Windows 11 ISO installation https://www.microsoft.com/it-it/software-download/windows11 Linux distro installation: lubuntu...

CVE-2023-22098

CVE-2023-22098 - Oracle VM VirtualBox 7.0.10 r158379 Escape Hey VM Wizards, In 2023, the outstanding security researcher Andy Nguyen @TheFlow0 discovered multiple vulnerabilities in Virtio-net for VirtualBox. All kudos to him for his incredible work. This repository contains the exploit for...

CVE-2026-21986-VirtualBox-DoS

CVE-2026-21986 - VirtualBox Shared Folders Kernel Memory Exhaustion DoS Overview This repository contains a proof of concept and technical write-up for CVE-2026-21986, a denial-of-service vulnerability in Oracle VM VirtualBox. The issue exists in the Shared Folders driver interface and allows...

cve-2023-21987-poc

cve-2023-21987-poc Oracle VirtualBox VGA OOB-Read Vulnerability This Proof of Concept PoC is designed for a Linux guest OS running on a Windows host OS. The purpose of this PoC is to demonstrate the ability to leak addresses of VirtualBox components. You may need to adjust the pointer values with...

VirtualBox-6.0.0-Exploit-1-day

VirtualBox 6.0.0 Exploit 1-day VBox bugs to be used CVE-2019-2525 : crUnpackExtendGetAttribLocation Information Disclosure CVE-2019-2548 : crServerDispatchReadPixels Integer overflow, leading to Heap overflow these bugs can be triggered when 3D Acceleration is enabled. First, before the...

Analyse-faille-de-s-curit-CVE-2025-6018-CVE-2025-6019

Instructions for performing the vulnerability demonstration ISO LINK FOR THE VULNERABILITY Please download the following OS image openSUSE-Leap-15.6 using this link: https://download.opensuse.org/distribution/leap/15.6/iso/openSUSE-Leap-15.6-DVD-aarch64-Build710.3-Media.iso The image is...

vbox-ovf-nat-tftp-prefix

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · vbox-ovf-nat-tftp-prefix vbox-ovf-nat-tftp-prefix Class: File read Reach: Local guest after UI:R import Oracle VM VirtualBox OSS 7.2.20 f2792cf44 - Oracle vbox:Machine OVF import sanitizes ExtraData, shared folders,...

e1000_vulnerability_exploit

e1000vulnerabilityexploit Installation $ ./install.sh Only own version build are supported yet. Please choose own and debug to build your debug version. Warning : During the process an error can occur, especially during the sources compilation. You can have something like "Exit with error status...

CVE-2024-38063

CVE-2024-38063 - SSP H3 For this setupthe one from the video I've used Windows 22H2 19045 and build 2468. this CVE is not patched until 4780 I've tried this with Qemu/KVM but the network adapter was not coalescing the packets from what i've investigated with tcpdump. The solution was to use...

vbox-hgcm-ssm-cparms

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · vbox-hgcm-ssm-cparms vbox-hgcm-ssm-cparms Class: Heap overflow Reach: Local host Oracle VM VirtualBox OSS 7.2.20 f2792cf44 - Oracle Live HGCM still refuses cParms 32. Saved-state load does not. vmmdevR3HgcmLoadState...

VBoxCloak

VBoxCloak A PowerShell script that attempts to help malware analysts hide their VirtualBox Windows VM's from malware that may be trying to evade analysis. Guaranteed to bring down your pafish ratings by at least a few points ; The script accomplishes this by doing the following: Renames several...

RWCTF21-VirtualBox-61-escape

RWCTF21-VirtualBox-61-escape 0day VirtualBox 6.1 Escape for RealWorld CTF 2020/2021 Demo What? This is our solution for RealWorld CTF's "Box Escape" challenge from the 2020/2021 quals. Currently a 0day but we'll add the CVE number once there is one. CVE-2021-2119 How does it work? We wrote a...

CVE-2026-87322

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza...

CVE-2026-87301

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza...

EUVD-2026-106364

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.20. Easily exploitable vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the Oracl...