Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

If someone can access my Ubuntu VirtualBox files, can they hack into it?

Is it hard?

share|improve this question
up vote 2 down vote accepted

"If someone can access my ubuntu virtualbox files, can they hack into it?"

If someone is able to access your files, why should he hack it?

share|improve this answer
they don't know the password to login? – user27449 Sep 22 '10 at 14:10
if they don't know the password, they are unable to access the files – Michael K Sep 22 '10 at 15:25
@Michael K: I think he meant the password of the VirtualMachine. – Bobby Sep 22 '10 at 15:51
user27449, note that they don't need to log in. Unless your drives are encrypted, they can mount them as "Drive 2" and read all the files, or even replace a Windows (or other OS) file with a keylogger or other Trojan. IOW: to answer your original question: yes. – CarlF Sep 22 '10 at 16:26
+1 CarlF: You should have made that an answer, it's a good one. The answer to the second part of OP's question is NO. It's pretty easy for anyone with even a little VM knowledge. Just a clarification, for CarlF's replacement scenario to work they'd need read/write access to the .VirtualBox directory tree. – hotei Sep 22 '10 at 17:06

Yes, they can. It has been discovered with VMWare images, if your image is not encrypted, then they can get full access to your virtual machine through the image. Obviously they need access to your image, once they have access they can mount it and boot it up without you even knowing. That's as much as I can remember from off the top of my head.

Hope that helps.

share|improve this answer

If someone is able to access the files associated with the virtual hard drive, then yes, it is possible to modify the content of the files from the virtual hard drive. I believe it is not hard to do it: as I remember, it is possible to mount the virtual hard drive and to access (read/write/delete/whatever) files from it.

share|improve this answer

If they have access to the hard disk image files, then they could mount those images in their own VirtualBox machines. This isn't hard, and would probably let them see the files on the disks (unless you have disk encryption turned on, or something similar). In that sense, yes they could "hack into it".

Getting access to the content within those files is a similar but separate matter. Are the files password-protected, encrypted, etc.? Are the passwords stored in the disk image?

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .