Hypervisor-From-Scratch

Hypervisor From Scratch A tutorial on creating a hypervisor from scratch All the parts » Part 1 · Part 2 · Part 3 · Part 4 · Part 5 · Part 6 · Part 7 · Part 8 If you're looking to use a hypervisor for analysis and reverse engineering tasks, check outHyperDbg Debugger. It's a hypervisor-based...

dissect

dissect Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT part of NCC Group. This project is a meta package, it will install all other Dissect modules wi...

applepie

applepie, una implementación de hipervisor para Bochs ¡Hola! ¡Bienvenido a applepie! Esta es una herramienta diseñada para fuzzing, introspección y encontrar errores. Es un hipervisor que utiliza la API de Windows Hypervisor Platform presente en versiones recientes de Windows específicamente, fue...

applepie

applepie, a hypervisor implementation for Bochs Hello! Welcome to applepie! This is a tool designed for fuzzing, introspection, and finding bugs! This is a hypervisor using the Windows Hypervisor Platform API present in recent versions of Windows specifically this was developed and tested on...

mmiotic

mmiotic An exploratory tool for MMIO timing — time any physical address, and dissect the hardware off the latency. Unexpectedly useful for hardware reverse-engineering, hypervisor fingerprinting, side-channelling device activity, register characterization, calibrating malicious triggers, and...

HyperDbg

HyperDbg Debugger HyperDbg Debugger es un depurador de código abierto asistido por hipervisor para Windows ¡el soporte para Linux está actualmente en desarrollo! con soporte para depuración tanto en modo usuario como en modo kernel nativo. Está diseñado para ingeniería inversa, fuzzing y análisis...

CVE-2022-22063

CVE-2022-22063 CVE-2022-22063 is a security issue in the hypervisor firmware of some older Qualcomm chipsets. An unprotected hardware component the "boot remapper" can be abused to gain full read/write access to the hypervisor from a modified operating system privilege escalation. Exploiting the...

tandasat.github.io

System Programming Lab Our Training Our next public Hypervisor Development class is: Date: Oct 12 - 15, 2026 4 days Time: 8am - 4pm PDT/UTC-7 Format: Remote Register at RegFox If you want to receive future class schedule announcements, subscribe to our mailing list by sending an empty email to...

NovaHypervisor

NovaHypervisor Descripción NovaHypervisor es un hipervisor de host x64 Intel defensivo. El objetivo de este proyecto es proteger contra ataques basados en el kernel ya sea mediante Bring Your Own Vulnerable Driver BYOVD u otros medios salvaguardando los productos de defensa AntiVirus / Protección...

Hypervisor-101-in-Rust

Hypervisor 101 in Rust The materials of the "Hypervisor 101 in Rust" class held at Global Cybersecurity Camp 2023 Singapore. This repository contains a fuzzing hypervisor for UEFI on Intel/AMD processors, lecture and hands-on exercise materials, and sample corpus and target files. Read the course...

detux

Detux: The Multiplatform Linux Sandbox Introduction: Detux is a sandbox developed to do traffic analysis of the Linux malwares and capture the IOCs by doing so. QEMU hypervisor is used to emulate Linux Debian for various CPU architectures. The following CPUs are currently supported: x86 x86-64 AR...

HvLoader

Resumen de HvLoader HvLoader.efi es una aplicación EFI para cargar un cargador de hipervisor externo. HvLoader.efi carga un binario de cargador de hipervisor dado DLL, EFI, etc. y llama a su punto de entrada pasando el ImageHandle de HvLoader.efi. De esta manera, el binario del cargador de...

blackpill

BlackPill BlackPill is a stealthy Linux rootkit made in Rust. Features The rootkit is composed of multiple modules talking about Rust modules, not kernel modules: defense evasion : hide files, processes, network connections, etc. hooking : hook syscalls and IDT hypervisor : create a virtual machi...

see

Entorno de Ejecución en Aislamiento :Fuente: https://github.com/F-Secure/see :Documentación: https://see.readthedocs.io :Descarga: https://pypi.python.org/pypi/python-see |travis badge| |docs badge| .. |travis badge| image:: https://travis-ci.org/F-Secure/see.svg?branch=master :target:...

reave

REAVE Reave es un framework de post-explotación diseñado para puntos finales de hipervisores, escrito en Python. Actualmente se encuentra en desarrollo. Reave sigue un modelo tradicional de listener/agente, donde el usuario puede configurar múltiples listeners que aceptan cualquier número de...

Elysium-Vanguard-Sentinel-Audit

SENTINEL-ROOT-AUDIT: Honor Magic V2 Hypervisor Detection Suite ➲ Project Overview SENTINEL-ROOT-AUDIT is a professional-grade security suite designed to audit kernel integrity and detect hypervisor-level interventions on the Honor Magic V2 SM8550. While the core vulnerability CVE-2025-38352 allow...

POC_CVE-2025-29943_Write-what-where-Condition

StackWarp: PoC for CVE-2025-29943 Prueba de concepto para la vulnerabilidad de hardware StackWarp CVE-2025-29943 en procesadores AMD. Esta falla permite a un atacante con privilegios de administrador en un host hipervisor manipular la configuración de la canalización de la CPU para corromper el...

AlmaLinux 9 : microcode_ctl (ALSA-2026:68011)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:68011 advisory. kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6...

RockyLinux 10 : microcode_ctl (RLSA-2026:67979)

The remote RockyLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:67979 advisory. kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6...

ALSA-2026:67979 Important: microcode_ctl security, bug fix, and enhancement update

The microcodectl packages provide microcode updates for Intel and AMD processors. Security Fixes: kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6 Processors: Privilege escalation via improper memory...