A VM nested inside another VM. Is there any way to retrieve the kernel of nested VM while in top level VM?

0

Alright, So I have a VM running inside another VM. I'll call the first, top level VM level 1, and the nested VM level 2.

My goal is to read the memory of the nested VM (level 2) while inside the level 1 VM.

Background information of the VMs. They are both Linux based, 32-bit OS. They can both be Linux V4.4.14. (I have different set-ups).

What I know... The memory of the Linux OS Virtual based, and my target (the kernel) lyes within the memory addresses 0xc0000000 to 0xffffffff for a 32-bit Linux OS. I have successfully read the kernel memory and gotten the information I want from the level 1 VM.

Theory's tried so far to retrieve the level 2 VM kernel from the level 1 VM... Me and my professor believed because the level 2 VM was running like any other program in the level 1 VM that we would be about to simple read the memory from addresses 0x00000000 to 0xc0000000, and find the same structure of data from the level 1 VM's kernel.

What has been tried thus far... I have scanned the memory from 0x00000000 to 0xc0000000, targeting specific information that I know is within the kernel of the level 2 VM. My results were empty, nil. I couldn't find any exact matches for what I was looking for.

Next approach... Me and my professor believe the data for the level 2 VM is in it's own space that we cannot access with the current functions of our program.

What we need to know... Where is the level 2 kernel in the level 1 memory? How does this nested VM inside a VM work? I hope someone out there can help, or I might be screwed.

Thanks.

linux
security
process
linux-kernel
asked on Stack Overflow Jul 20, 2019 by Tdizzle • edited Jul 20, 2019 by pmg

0 Answers

Nobody has answered this question yet.


User contributions licensed under CC BY-SA 3.0