A forum for reverse engineering, OS internals and malware analysis 

Ask your beginner questions here.
 #3522  by Kick10
 Tue Nov 16, 2010 6:46 pm
Hello!

Suggest please some good docs on virtualization for noobs. It would be very nice if they will contain some simple code examples of its usage.
 #3532  by GamingMasteR
 Wed Nov 17, 2010 3:52 am
Code Virtualization ? like used in protection tools (ExeCryptor/VMProtect/Themida) ?
Or OS Virtualization ? like VMWare/VirtualPC ?
 #3538  by Kick10
 Wed Nov 17, 2010 12:32 pm
Thanks a lot for docs & examples! And what about cpu extensions like AMD-V and Intel-VT? What are they for?
 #3541  by GamingMasteR
 Wed Nov 17, 2010 1:36 pm
It's well-documented in Intel's manuals (System Programming Guide Part 2, Chapter 20).
 #3542  by Kick10
 Wed Nov 17, 2010 1:43 pm
Yes, I saw that, but still not clear how to use it.
 #3545  by Cr4sh
 Wed Nov 17, 2010 4:01 pm
Kick10 wrote:Thanks a lot for docs & examples! And what about cpu extensions like AMD-V and Intel-VT? What are they for?
Here is some examples of hardware virtualization:

Hooking CPUID – A Virtual Machine Monitor Rootkit Framework:
http://rootkit.com/newsread.php?newsid=758
(Not available at this time, but I attached source code to this post)

BitVisor - complete and well-coded open-source hypervisor:
http://www.bitvisor.org/
http://sourceforge.net/projects/bitvisor/files/

HyperDbg - A kernel debugger that leverages hardware-assisted virtualization:
http://code.google.com/p/hyperdbg/

PS: anybody knows, what happen with rootkit.com?
Attachments
(126.2 KiB) Downloaded 72 times