Nytro Posted November 16, 2014 Report Posted November 16, 2014 A VMware Guest to Host Escape StoryKostya KortchinskyImmunity, Inc.BlackHat USA 2009, Las VegasWhy deviices?? I don't have enough lowlevelsystem Mojo ?? They are common to all VMware products? They “run” on the Host– vmwarevmxprocess? They can be accessed from the guest– Through Port I/O or memorymappedI/O? They are written in C/C++? They sometimes parse some complex data!Download: http://www.blackhat.com/presentations/bh-usa-09/KORTCHINSKY/BHUSA09-Kortchinsky-Cloudburst-SLIDES.pdf Quote