Straight Outta VMware: Modern Exploitation of the SVGA Device for Guest-to-Host Escapes
summary
Analyzes modern exploitation of VMware Workstation's virtual SVGA graphics device to achieve guest-to-host code execution. Covers the SVGA graphics pipeline and implementation details from an attacker's perspective, aiming to show how flaws can be leveraged to escape the VM and run code on the host.
AI-written summary · about
chapters (5)
- 0:00VMware graphics exploitation
- 10:14SVGA device architecture
- 20:39Graphics pipeline vulnerabilities
- 30:38Guest-to-host escape demo
- 43:26Summary & Q&A
related talks
56mA Retrospective Case Study of VMware Guest-to-Host Escape Vulnerabilities
44mFor the Greater Good: Leveraging VMware's RPC Interface for fun and profit
27m3d Red Pill: A Guest-to-Host Escape on QEMU/KVM Virtio Device
55mLessons Learned from Eight Years of Breaking Hypervisors
54mPoacher Turned Gamekeeper: Lessons Learned from Eight Years of Breaking Hypervisors
51mAnalysis of the Attack Surface of Windows 10 Virtualization-Based Security
50mExploiting the Hyper-V IDE Emulator to Escape the Virtual Machine
40mEvils in the Sparse Texture Memory: Exploit Kernel Based on Undefined Behaviors of Graphic APIs