MorteNoir1/virtualbox_e1000_0day resource

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1426 stars · 196 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A public proof-of-concept exploit for a guest-to-host escape vulnerability (0day) in VirtualBox's E1000 (Intel PRO/1000 MT) network device emulation, affecting VirtualBox 5.2.20 and earlier. It includes a detailed writeup of the vulnerability and was released as an act of full disclosure to protest infosec industry practices.

Use cases

• study how a VirtualBox VM escape exploit works
• learn about E1000 Tx descriptor handling bugs
• test whether a VirtualBox deployment is vulnerable to the E1000 escape
• research hypervisor security and device emulation attacks
• understand guest-to-host privilege escalation via /dev/vboxdrv

When to choose

• you are a security researcher studying hypervisor or device-emulation vulnerabilities
• you need a real-world example of a VM escape for education or defense research
• you want to verify whether legacy VirtualBox 5.2.20-or-earlier deployments are exposed

When to avoid

• you need a maintained tool or supported software - this is a one-off 2018 exploit with no license
• you want to attack systems you do not own or have authorization to test
• you run current, patched VirtualBox versions where this bug is fixed

Facets

learning-resource · maturity abandoned

security penetration-testing reverse-engineering security developer-tools cross-platform vm-escape exploit 0day virtualbox e1000 guest-to-host-escape full-disclosure virtualization

Member repositories

For agents

markdown · JSON · MCP: product_card(name="MorteNoir1/virtualbox_e1000_0day")