weixin_39759995
weixin_39759995
2020-12-26 01:34

macOS leak string about VirtualBox !

macOS leak string about VirtualBox in:

*USB Mouse device mouse

*USB Keyboard device keyboard

Im try to rename Manufacturer using VirtualBox Library manual, but no success, try a lot of custom strings related to USB Devices:

VBoxManage setextradata "VM name" "VBoxInternal/USB/HidMouse/0/Config/CoordShift" 0

VBoxManage setextradata "VM name" VBoxInternal/Devices/usb-ehci/0/LUN#0/Config/CaptureFilename "filename"

Are possible to rename USB Manufacturer device in VirtualBox ?

Thank you

Library Reference:

Detect VirtualBox macOS: https://stackoverflow.com/questions/28529633/how-to-detect-if-mac-os-x-is-being-run-inside-a-virtual-machine

https://forums.virtualbox.org/viewtopic.php?f=2&t=79587

https://www.virtualbox.org/manual/ch03.html#settings-usb

https://www.virtualbox.org/manual/ch09.html#idp47569020397456

https://www.virtualbox.org/manual/ch09.html#changedmi

https://www.virtualbox.org/manual/ch08.html

http://underpop.online.fr/v/virtualbox/ch12s03.html

http://underpop.online.fr/v/virtualbox/

https://project.altservice.com/journals/diff/976?detail_id=1255

该提问来源于开源项目:hfiref0x/VBoxHardenedLoader

  • 点赞
  • 写回答
  • 关注问题
  • 收藏
  • 复制链接分享
  • 邀请回答

4条回答

  • weixin_39759995 weixin_39759995 4月前

    I fix this issue

    Step 1- Disabling "PatchGuard and Driver Signature Enforcement" on Host Windows 10

    Tool used: https://github.com/hfiref0x/UPGDSED

    Step 2- After this im able to run loader and Tsugumi.sys correctly, issue Fixed.

    点赞 评论 复制链接分享
  • weixin_39725154 weixin_39725154 4月前

    Good to know, just remember all these hacks are potentially unsafe to your host system. Make sure you understand consequences.

    点赞 评论 复制链接分享
  • weixin_39759995 weixin_39759995 4月前

    Yes i use "Faronics Deep Freeze" Software, im free of some malwares.

    You do you know any tool to detect macOS running inside virtualbox ?

    Thanks for you good job hfiref0x.

    点赞 评论 复制链接分享
  • weixin_39725154 weixin_39725154 4月前

    Unsure if I can help you as I'm not familiar with that.

    点赞 评论 复制链接分享

相关推荐