Questions tagged [hypervisor]

Use this tag when asking specific hypervisors, hypervisor reverse engineering and hypervisor related CPU questions.

Filter by
Sorted by
Tagged with
1 vote
0 answers
44 views

ReadProcessMemory from host to Hyper-V Windows Guest VM

Is it possible to use ReadProcessMemory or some other form of it maybe via a library to read memory from a virtual machine running inside Hyper-V? The host is running Windows 11 the Guest is running ...
user avatar
  • 11
1 vote
0 answers
73 views

Finding which binary (library, driver, etc) caused an event log

I found some events in the Windows Event Log, and I was wondering which binary caused them. The event I am curious about is Event ID 27 from Hyper-V Hyper-V launch failed; the Hyper-V boot loader was ...
user avatar
  • 81
4 votes
0 answers
286 views

Using GDB to trace guest OS inside a hypervisor, the whole running on Qemu - kvm

I use Gdb to trace the execution (breakpoint, single stepping, ...) of a hypervisor OS in Qemu and it works fine so far. qemu-system-x86_64 -enable-kvm -display sdl -cpu host -serial my: stdio -m ...
user avatar
  • 141
3 votes
1 answer
1k views

Is it possible to hook CPU instructions without severe performance impact?

I have been working on some unpackers, and I noticed that at their end, they mostly use this: mov edx, [ebp+oep] call edx ; now, you're at the OEP of the original binary Or this: mov ecx, [ebp+oep] ...
user avatar
5 votes
1 answer
2k views

Using a VMM/hypervisor to monitor guest OS execution?

I would like to set up a virtual machine monitor using Microsoft Hyper-V, VMware vSphere/ESX, Xen, or any other alternative hypervisor solution that is able to monitor the execution of a guest OS (a ...
user avatar