# MorteNoir1/virtualbox_e1000_0day

VirtualBox E1000 Guest-to-Host Escape

Repository: https://github.com/MorteNoir1/virtualbox_e1000_0day
Canonical: https://ross.abutalabs.com/products/virtualbox_e1000_0day
License Family: other
Last push: 2018-11-15T15:47:18+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 2857, "days_push": 2848, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1426, forks 196 (observed 2026-08-28T04:04:41.571826+00:00)

## What it is
A public proof-of-concept exploit for a guest-to-host escape vulnerability (0day) in VirtualBox's E1000 (Intel PRO/1000 MT) network device emulation, affecting VirtualBox 5.2.20 and earlier. It includes a detailed writeup of the vulnerability and was released as an act of full disclosure to protest infosec industry practices.

## Use cases
- study how a VirtualBox VM escape exploit works
- learn about E1000 Tx descriptor handling bugs
- test whether a VirtualBox deployment is vulnerable to the E1000 escape
- research hypervisor security and device emulation attacks
- understand guest-to-host privilege escalation via /dev/vboxdrv

## When to choose
- you are a security researcher studying hypervisor or device-emulation vulnerabilities
- you need a real-world example of a VM escape for education or defense research
- you want to verify whether legacy VirtualBox 5.2.20-or-earlier deployments are exposed

## When to avoid
- you need a maintained tool or supported software - this is a one-off 2018 exploit with no license
- you want to attack systems you do not own or have authorization to test
- you run current, patched VirtualBox versions where this bug is fixed

## Facets
- artifact type: learning-resource
- maturity: abandoned
- function: security, penetration-testing, reverse-engineering
- domain: security, developer-tools
- platform: cross-platform
- tags: vm-escape, exploit, 0day, virtualbox, e1000, guest-to-host-escape, full-disclosure, virtualization

## Member repositories
- MorteNoir1/virtualbox_e1000_0day (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:41.571826+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T04:37:25.233972+00:00, confidence not recorded.
  - readme: https://github.com/MorteNoir1/virtualbox_e1000_0day (fetched 2026-08-28T04:04:41.571826+00:00, sha 57afe9064d95)
- Data as of 2026-08-30T08:39:29.467469+00:00.