Virtualization detection through speculative execution PoCs and papers
☆72May 22, 2018Updated 8 years ago
Alternatives and similar repositories for rdtsc-checkvirt-poc
Users that are interested in rdtsc-checkvirt-poc are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An example code of CiGetCertPublisherName☆15Mar 24, 2022Updated 4 years ago
- Analyze PatchGuard☆56Aug 19, 2018Updated 7 years ago
- ☆74Dec 17, 2020Updated 5 years ago
- Fileless persistence, attacks and anti-forensic capabilties.☆92Dec 6, 2018Updated 7 years ago
- ☆14Sep 22, 2023Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A simple x86_64 AMD-v hypervisor type-2 Programmed with C++, with soon to be added syscall hooks. [W.I.P]☆110Aug 3, 2023Updated 2 years ago
- Illustrates the concept of return address spoofing, and how it is used.☆14May 13, 2020Updated 6 years ago
- reveal and detect of common hooks under win32☆13Sep 23, 2020Updated 5 years ago
- x64 PE-COFF virtualization driven obfuscation engine☆58Oct 14, 2022Updated 3 years ago
- Symbolic debugging tool using JonathanSalwan/Triton☆25Oct 24, 2018Updated 7 years ago
- AMD SVM hypervisor rootkit proof of concept☆49Sep 23, 2023Updated 2 years ago
- vulnerability in zam64.sys, zam32.sys allowing ring 0 code execution. CVE-2021-31727 and CVE-2021-31728 public reference.☆89May 10, 2021Updated 5 years ago
- Yet another windows syscall library☆18Jun 22, 2020Updated 6 years ago
- Simple header only library to change return address on current stack frame.☆21Sep 4, 2016Updated 9 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 64-bit x86 CPU emulation and sandboxing.☆20Mar 31, 2016Updated 10 years ago
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆269Aug 31, 2022Updated 3 years ago
- 🪝 Various EPT hook detection approaches☆155Feb 22, 2026Updated 5 months ago
- ☆24Nov 17, 2017Updated 8 years ago
- Obfuscator based on logic-bombs☆65May 9, 2020Updated 6 years ago
- tests to catch some sloppy hv impls☆36Mar 16, 2026Updated 4 months ago
- Take back control of Windows Code Integrity, no exploits or patching required! Requires that you control your own Platform Key (PK).☆54Aug 22, 2022Updated 3 years ago
- 🧶 The Win32 usermode threading library with UMS/fibers/threads support☆30Jul 1, 2019Updated 7 years ago
- Software Distribution Service☆12Jul 2, 2015Updated 11 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- I Know Where Your Page Lives: Derandomizing the latest Windows 10 Kernel - ZeroNights 2016☆174Dec 7, 2016Updated 9 years ago
- This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness☆58Sep 12, 2019Updated 6 years ago
- x64 manual mapper using inline syscalls☆10Jul 8, 2021Updated 5 years ago
- Extended library for using direct system calls on windows☆17Feb 6, 2022Updated 4 years ago
- Research on obfuscated licensing APIs / CLIP service in the Windows kernel☆145Aug 23, 2022Updated 3 years ago
- Kernel driver for detecting Intel VT-x hypervisors.☆203Jul 11, 2023Updated 3 years ago
- ☆17Oct 31, 2022Updated 3 years ago
- Static library and headers for linking your software with ntdll.dll☆38Dec 16, 2019Updated 6 years ago
- just an lite AntiRootkit for interesting☆24Dec 9, 2015Updated 10 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- This is the first software system, which can detect a stealthy hypervisor and calculate several nested ones even under countermeasures.☆91Jun 16, 2015Updated 11 years ago
- A basic PE bootloader☆15Oct 21, 2023Updated 2 years ago
- ☆143Jan 13, 2021Updated 5 years ago
- 64 bit monolithic nt-style kernel☆98Apr 14, 2021Updated 5 years ago
- Virtual machine with a custom instruction set in C☆16Jul 17, 2018Updated 8 years ago
- ☆14Dec 27, 2019Updated 6 years ago
- ksc4cpp is a shellcode framework for windows kernel based on C++☆22Feb 10, 2023Updated 3 years ago