Virtualization detection through speculative execution PoCs and papers
☆72May 22, 2018Updated 8 years ago
Alternatives and similar repositories for rdtsc-checkvirt-poc
Users that are interested in rdtsc-checkvirt-poc are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An example code of CiGetCertPublisherName☆15Mar 24, 2022Updated 4 years ago
- Analyze PatchGuard☆56Aug 19, 2018Updated 8 years ago
- Fileless persistence, attacks and anti-forensic capabilties.☆91Dec 6, 2018Updated 7 years ago
- ☆73Dec 17, 2020Updated 5 years ago
- reveal and detect of common hooks under win32☆13Sep 23, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A simple x86_64 AMD-v hypervisor type-2 Programmed with C++, with soon to be added syscall hooks. [W.I.P]☆114Aug 3, 2023Updated 3 years ago
- Illustrates the concept of return address spoofing, and how it is used.☆14May 13, 2020Updated 6 years ago
- ☆14Sep 22, 2023Updated 3 years ago
- Symbolic debugging tool using JonathanSalwan/Triton☆25Oct 24, 2018Updated 7 years ago
- Yet another windows syscall library☆18Jun 22, 2020Updated 6 years ago
- This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness☆62Sep 12, 2019Updated 7 years ago
- x64 PE-COFF virtualization driven obfuscation engine☆59Oct 14, 2022Updated 4 years ago
- Demonstration of triggering non-maskable interrupts using nt&hal API on windows.☆10Jun 27, 2022Updated 4 years ago
- C++23 compile time integral encryption.☆11Dec 2, 2023Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Take back control of Windows Code Integrity, no exploits or patching required! Requires that you control your own Platform Key (PK).☆55Aug 22, 2022Updated 4 years ago
- Simple header only library to change return address on current stack frame.☆21Sep 4, 2016Updated 10 years ago
- 64-bit x86 CPU emulation and sandboxing.☆20Mar 31, 2016Updated 10 years ago
- vulnerability in zam64.sys, zam32.sys allowing ring 0 code execution. CVE-2021-31727 and CVE-2021-31728 public reference.☆89May 10, 2021Updated 5 years ago
- AMD SVM hypervisor rootkit proof of concept☆51Sep 23, 2023Updated 3 years ago
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆271Aug 31, 2022Updated 4 years ago
- I Know Where Your Page Lives: Derandomizing the latest Windows 10 Kernel - ZeroNights 2016☆176Dec 7, 2016Updated 9 years ago
- tests to catch some sloppy hv impls☆37Mar 16, 2026Updated 7 months ago
- PointerGuard is a proof-of-concept tool used to create 'guarded' pointers which disguise pointer addresses, monitor reads/writes, and pre…☆55May 23, 2022Updated 4 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆24Nov 17, 2017Updated 8 years ago
- Modifies the Blue Screen of Death for 1909/20h1/20h2/21h1.☆170Aug 12, 2022Updated 4 years ago
- 🧶 The Win32 usermode threading library with UMS/fibers/threads support☆29Jul 1, 2019Updated 7 years ago
- Obfuscator based on logic-bombs☆64May 9, 2020Updated 6 years ago
- Software Distribution Service☆12Jul 2, 2015Updated 11 years ago
- Implements the POP/MOV SS (CVE-2018-8897) vulnerability by leveraging SYSCALL to perform a local privilege escalation (LPE).☆120Aug 8, 2018Updated 8 years ago
- 🪝 Various EPT hook detection approaches☆160Feb 22, 2026Updated 7 months ago
- ☆101Oct 6, 2017Updated 9 years ago
- Extended library for using direct system calls on windows☆17Feb 6, 2022Updated 4 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Research on obfuscated licensing APIs / CLIP service in the Windows kernel☆146Aug 23, 2022Updated 4 years ago
- Kernel driver for detecting Intel VT-x hypervisors.☆204Jul 11, 2023Updated 3 years ago
- just an lite AntiRootkit for interesting☆24Dec 9, 2015Updated 10 years ago
- ☆14Oct 14, 2016Updated 10 years ago
- A basic PE bootloader☆15Oct 21, 2023Updated 2 years ago
- Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.☆119Feb 8, 2022Updated 4 years ago
- Virtual machine with a custom instruction set in C☆16Jul 17, 2018Updated 8 years ago