The great escapes of VMware: a retrospective case study of VMware guest to host escape vulnerabilities
https://www.blackhat.com/docs/eu-17/materials/eu-17-Mandal-The-Great-Escapes-Of-Vmware-A-Retrospective-Case-Study-Of-Vmware-G2H-Escape-Vulnerabilities.pdfExploits/PoCs
exploits-pocsGitHub - Comsecuris/vgpu_shader_pocs: PoCs for VMWare VGPU Direct 3D 10 vulnerabilities fixed in VMware Workstation 12.5.5 and 12.5.7
https://github.com/comsecuris/vgpu_shader_pocsGitHub - guardicore/vmware_guest_auth_bypass: Proof of concept of VMSA-2017-0012
https://github.com/guardicore/vmware_guest_auth_bypassGitHub - unamer/vmware_escape: VMware Escape Exploit before VMware WorkStation 12.5.5
https://github.com/unamer/vmware_escapeSVGA 3D graphics
svga-3dCLOUDBURST: A VMware Guest to Host Escape Story - BlackHat USA 2009
http://www.blackhat.com/presentations/bh-usa-09/KORTCHINSKY/BHUSA09-Kortchinsky-Cloudburst-SLIDES.pdfGPU Virtualization on VMware’s Hosted I/O Architecture
50 Shades Of Fuzzing
https://papers.put.as/papers/macosx/2016/50_Shades_Of_Fuzzing.pdfVMware SVGA Device Developer Kit
https://sourceforge.net/p/vmware-svga/git/ci/master/tree/lib/metalkit/Wandering through the Shady Corners of VMware Workstation/Fusion
https://comsecuris.com/blog/posts/vmware_vgpu_shader_vulnerabilities/Guest RPC
guest-rpcVMware et sécurité - HSC
Zero Day Initiative — Automating VMware RPC Request Sniffing
https://www.thezdi.com/blog/2018/1/19/automating-vmware-rpc-request-sniffingLeveraging VMware's RPC Interface for Fun and Profit
https://ruxcon.org.au/assets/2017/slides/ForTheGreaterGood.pdf