Improve post/linux/gather/checkvm

[jvoisin]

Sister of #18179 but for Linux.

Verification

List the steps needed to make sure this thing works

• Test VirtualBox detection
• Test VMware detection
• Test Qemu detection
• Test Hyper-V detection
• Test Xen detection

[jheysel-r7]

Hey @jvoisin, I was able to test most of the changes in this PR and everything is looking good so far. I was wondering if you'd be able to test the Xen and Hyper-V detections for me?

My dev machine is running Mac OSX so I can't run Hyper-V enabled Windows VMs in my VMware Fusion. I think I should be able to run Xen in a Linux VM in order to host another Linux VM to test the detection however the nested virtualization was giving me some issues. Let me know, thanks!

msf6 post(linux/gather/checkvm) > run

[*] Gathering System info ....
[+] This appears to be a 'VirtualBox' virtual machine
[*] Post module execution completed


msf6 post(linux/gather/checkvm) > run

[*] Gathering System info ....
[+] This appears to be a 'VMware' virtual machine
[*] Post module execution completed


msf6 post(linux/gather/checkvm) > run

[*] Gathering System info ....
[+] This appears to be a 'Qemu/KVM' virtual machine
[*] Post module execution completed

[jvoisin]

I don't think I'll be able to test Xen and Hyper-V anytime soon :/

[jheysel-r7]

Hey @jvoisin, no worries on the Hyper-V / Xen testing, I'll see if anyone else on the team might be able to help out.

[bwatters-r7]

Testing this on a Hyper-V VM:

msf6 payload(linux/x64/meterpreter/reverse_tcp) > sessions -i -1
[*] Starting interaction with 1...

meterpreter > sysinfo
Computer     : 10.5.132.143
OS           : Ubuntu 22.04 (Linux 5.19.0-32-generic)
Architecture : x64
BuildTuple   : x86_64-linux-musl
Meterpreter  : x64/linux
meterpreter > background
[*] Backgrounding session 1...
msf6 payload(linux/x64/meterpreter/reverse_tcp) > use post/linux/gather/checkvm 
msf6 post(linux/gather/checkvm) > show options

Module options (post/linux/gather/checkvm):

   Name     Current Setting  Required  Description
   ----     ---------------  --------  -----------
   SESSION                   yes       The session to run this module on


View the full module info with the info, or info -d command.

msf6 post(linux/gather/checkvm) > set verbose true
verbose => true
msf6 post(linux/gather/checkvm) > set session 1
session => 1
msf6 post(linux/gather/checkvm) > run

[*] Gathering System info ....
[+] This appears to be a 'MS Hyper-V' virtual machine
[*] Post module execution completed
msf6 post(linux/gather/checkvm) > 

[jheysel-r7]

Release Notes

This PR improves the linux checkvm post module by adding new techniques to identify the hypervisor in which the session is running.