Add vbox kernel module detection

Author: ShellCode33

vmdetect/common.go

@@ -26,7 +26,7 @@ func DoesFileExist(path string) bool {
 	return !os.IsNotExist(err)
 }
 
-func DoesFileContain(file *os.File, stringToBeFound string) bool {
+func DoesFileContain(file *os.File, stringsToBeFound ...string) bool {
 	reader := bufio.NewReader(file)
 
 	for {
@@ -41,8 +41,10 @@ func DoesFileContain(file *os.File, stringToBeFound string) bool {
 			return false
 		}
 
-		if strings.Contains(line, stringToBeFound) {
-			return true
+		for _, stringToBeFound := range stringsToBeFound {
+			if strings.Contains(line, stringToBeFound) {
+				return true
+			}
 		}
 	}
 }

vmdetect/linux.go

@@ -153,6 +153,18 @@ func checkXenProcFile() bool {
 	return DoesFileExist("/proc/xen")
 }
 
+func checkKernelModules() bool {
+
+	file, err := os.Open("/proc/modules")
+
+	if err != nil {
+		PrintError(err)
+		return false
+	}
+
+	return DoesFileContain(file, "vboxguest")
+}
+
 /*
 Public function returning true if a VM is detected.
 If so, a non-empty string is also returned to tell how it was detected.
@@ -168,6 +180,10 @@ func IsRunningInVirtualMachine() (bool, string) {
 		return true, "CPU Vendor (cpuid space)"
 	}
 
+	if checkKernelModules() {
+		return true, "Kernel module (/proc/modules)"
+	}
+
 	if checkUML() {
 		return true, "CPU Vendor (/proc/cpuinfo)"
 	}