How Browse Safely Install Free Virtual Machine
How Browse Safely Install Free Virtual Machine For Linux
Browse Safely Extension
How Browse Safely Install Free Virtual Machines

This is a short write-up and don’t use it to cheat in exams. If you do that you may find yourself in a position that you cannot go back and correct. Of course, this is meant only for educational purposes. And I only did it to satisfy my ego because people say that it is impenetrable(As I say nothing is 100% secure).

Why Install Windows 11 on Virtual Machine. Machine tool called Oracle VM Virtual Box (link below) to install Windows safely in a virtual environment.
Apr 11, 2019 Configure the VMs and install Active Directory Domain Services. After the script completes, browse to the Azure portal, then Virtual machines. Configure the first Domain Controller. Connect to AZDC01 using the credentials you provided in the script. Initialize and format the data disk as F: Open the Start menu and browse to Computer Management.

Microsoft’s Windows 95 was a huge leap from Windows 3.1. It was the first release of Windows with the Start menu, taskbar, and typical Windows desktop interface we still use today. Windows 95 won’t. This tutorial explains how to install Windows 10 on a virtual machine. You can try Windows 10 safely by installing it on virtual machine using VMware player.

Analysis🤯

First things first, Let’s playback the security restrictions:

Complete 🔒Lockdown

SEB locks everything by taking control of the whole U.I and there is nothing you can do there. We can modify the opensource seb code but the signature of the code will be invalidated and you cannot enter the exam.
SEB generates a browser exam key and validates it by sending it to the LMS(Learning management system) such as moodle, ilias, .etc.
You cannot change the SEB configuration file because the hash signature is verified with the exam server by sending it through the header of GET request
These are the header fields of SEB browser.

We can change the hash signature by MITM by changing every request but we need a streamlined solution, not some over-complicated solution.
I started playing with the parameters and found out that exam.net is just verifying the User-Agent(header value) and X-SafeExamBrowser-RequestHash (header field name) but not the hash itself. As of writing this writeup, exam.net doesn’t support browser exam key verification. So, we can change the headers by using simple browser extensions and make exam.net think that we are in high-security mode. But it will not work with LMS such as moodle because they have plugin support to enable browser key verification. Check out the diagram i have created(It’s not the official one but a projection of my understanding).

🕵️‍♀️Virtual Machine Detection

How Browse Safely Install Free Virtual Machine

SEB detects almost all the Virtual machine software (vmware, virutalbox, parallels desktop, .etc). It refuses to start in virtual machine at all.
With SEB 2.0 the architecture is more robust and does more security checks for VM detection.
But bypassing the detection will make it as a universal solution independent of the Operating System.

🅱️ypassing Virtual Machine Detection

Pre-requisites

We need to change the virtual machine configuration file .vmx located at your configured virtual machine files (Mostly in documents folder in windows).

Windows - VMware workstation, vmware player.
Mac - VMware Fusion (Parallels does not have a config file to modify).
Linux - VMware workstation.

Note- I haven’t tested with virutalbox but I recommend using only vmware products.

Let’s begin⌲

Install windows in vmware and remember the virtual machine files location.

IMPORTANT: Do not install vmware tools. SEB detects the vmware tools process and does not allow you to write the test.

Let’s change the .vmx configuration file and add the below line.
This setting will make VM look like the host machine.
Now you can open the exam irrespective of the LMS because the code signature and hash verification never fail.

Some More things📕

MOODLE & ILIAS

Bypassing virtual machine detection will enable you to minimize the virtual machine and browse your computer as a normal pc.
As I told you that changing User-Agent and X-SafeExamBrowser-RequestHash will allow you to write the exam in the same browser. But it will not work with MOODLE and ILIAS Lms has they have the capability to implement browser-exam-key security.Anyways Bypassing the VM detection will do the trick.

EXAM .net

How Browse Safely Install Free Virtual Machine For Linux

Exam.net has more liberal security integration with a safe exam browser. It provides the .seb config file to the browser and triggers the SEB to load the configuration and then it totally depends on the SEB security protocols and verify neither the integrity of the SEB code nor the Configuration file integrity.
However, SEB allowed me to install VMware tools but when starting the exam inside the SEB, Exam.net blocked me by saying you cannot use this device.It is due to the fact the presence of VMware Tools. So, As mentioned above do not install VMware tools.
There is another way to get past the VMware tools installation is by selecting Launch Take a Test (WIN10) which will allow you to get past the VMwaretools restriction and Virtual Machine Detection as it is not SEB (Take a Test is a Microsoft product).

Without the Virtual Machine you can modify the headers to make exam.net think that you are using SEB.
1. Download Simple Modify Header Extension (Available for Firfox and Chrome)
2. Download my Config file from here and import it to the extenstion and save.

Manually you can configure the extension as below and start the extension

Add HeaderField Name and Value:X-SafeExamBrowser-RequestHash : Anything

Modify HeaderFIeld Name and Value:User-Agent : Mozilla/5.0 SEB EXAM_#MK#_NET_HARD

Note: EXAM_#MK#_NET_HARD keyword is hardcoded and it may be changed in the future by exam.net. If so I will try to update the keyword in the blog.

Browse Safely Extension

These are handcrafted requests because exam.net is using regex to check the User-Agent values. Those are mandatory and you can add anything in between the Mozilla and SEB.

How Browse Safely Install Free Virtual Machines

Now you can directly open the exam.net and it thinks that you are in High-Security Mode and allows you to write the exam without any cheat prevention measures(Copy and Paste are blocked).