Skip to content

Virtualbox host post exploitation

kohai00 edited this page Sep 10, 2012 · 3 revisions

Use Case

You've exploited a system that's running a number of VirtualBox guests. You'd like to exploit those too. the ultimate goal is to pivot through VirtualBox commands into the guests. If that can't be done, then exploit the guests directly using gathered information.

Current Command Chain

Detect VirtualBox

ps aux | grep virtualbox

List VMS

vboxmanage list vms

List Running VMS

vboxmanage list runningvms

Find out Stuff

vboxmanage guestproperty enumerate [VM Name]

Get the IPv4 address of a running VM

vboxmanage guestproperty get [VM Name Case Sensitive] "/VirtualBox/GuestInfo/Net/0/V4/IP"

Check if it's running IPv6

vboxmanage guestproperty get [VM Name Case Sensitive] "/VirtualBox/GuestInfo/Net/0/V6/IP"

Resources

Clone this wiki locally