Page 2 - மெய்நிகர் பெட்டி News Today : Breaking News, Live Updates & Top Stories | Vimarsana
Beneficiários do auxílio emergencial podem receber prêmio de até R$ 250 mil; entenda
uol.com.br - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from uol.com.br Daily Mail and Mail on Sunday newspapers.
Recebe auxílio emergencial? Você pode ganhar prêmio de até R$ 250 mil; saiba como
uol.com.br - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from uol.com.br Daily Mail and Mail on Sunday newspapers.
Last Minute Deal: All-In-One 2021 Super-Sized Ethical Hacking Bundle, Save 98%
geeky-gadgets.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from geeky-gadgets.com Daily Mail and Mail on Sunday newspapers.
Last Minute Deal: All-In-One 2021 Super-Sized Ethical Hacking Bundle, Save 98%
geeky-gadgets.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from geeky-gadgets.com Daily Mail and Mail on Sunday newspapers.
Posted on Tue 20 August 2019 in Research
Introduction
Virtual Machine (VM) detection is nothing new. Malware has been doing it for over a decade now. Over time the techniques have advanced as defenders learned new ways of avoiding VM detection.
A while back a friend and I were working on a project related to exploit delivery via a web application for redteaming purposes. I wanted a way to fingerprint visitors of the site and hash the fingerprint data so I could look for potential repeat visitors. While investigating fingerprinting I stumbled upon something pretty interesting. I was looking at some code that collected information about WebGL capabilities. I quickly realized that some of the fingerprinting information could be useful for VM detection because vendor names were exposed. In this particular instance the string VMWare was contained within the WebGL information. After some more testing I also discovered that VirtualBox reported the same kind of information.