KHMcWilliams
Contributor
Contributor

VMWare Tools Security

So, I've dug around a bit and can't seem to hunt down this answer entirely. Short version, I'm setting up a VM environment for Malware Analysis. I've done all the network settings to prevent network leaks from guest to host. BUT I have concerns about the VMWare Tools function. It seems to me if I can copy a file from a guest, and post it in my host system, what prevents malware from being capable of using the VMWare tools from doing something similar (aside from the malware not being written to do so), and escaping the guest and landing on my machine? How does VMWare Tools prevent this from happening? Or does it?

 

Labels (1)
0 Kudos
1 Reply
a_p_
Leadership
Leadership

There are several "isolation" settings available for VMware Tools.
see e.g. https://docs.vmware.com/en/VMware-Tools/12.0.0/com.vmware.vsphere.vmwaretools.doc/GUID-685722FA-9009...

André

0 Kudos