VirtualBox 3D PoCs & exploits
See the subdirectories other than
For Arch Linux, you can use the provided PKGBUILD in
archpkg to get a debug version of
5.2.18, with the 3D security fixes from July 2018 reverted.
lib/chromium.py provide high-level access to the HGCM interface and
VBoxSharedCrOpenGL service, via
chromium.py can be used to very easily experiment with Chromium from Python
inside the guest. I used it to build a very simple, completely dumb fuzzer that
found multiple trivial crashes in minutes.