Questions tagged [hypervisor]
Use this tag when asking specific hypervisors, hypervisor reverse engineering and hypervisor related CPU questions.
5 questions
1
vote
0
answers
237
views
ReadProcessMemory from host to Hyper-V Windows Guest VM
Is it possible to use ReadProcessMemory or some other form of it maybe via a library to read memory from a virtual machine running inside Hyper-V?
The host is running Windows 11 the Guest is running ...
1
vote
0
answers
80
views
Finding which binary (library, driver, etc) caused an event log
I found some events in the Windows Event Log, and I was wondering which binary caused them.
The event I am curious about is Event ID 27 from Hyper-V
Hyper-V launch failed; the Hyper-V boot loader was ...
4
votes
0
answers
372
views
Using GDB to trace guest OS inside a hypervisor, the whole running on Qemu - kvm
I use Gdb to trace the execution (breakpoint, single stepping, ...) of a hypervisor OS in Qemu and it works fine so far.
qemu-system-x86_64 -enable-kvm -display sdl -cpu host -serial my: stdio -m ...
3
votes
1
answer
2k
views
Is it possible to hook CPU instructions without severe performance impact?
I have been working on some unpackers, and I noticed that at their end, they mostly use this:
mov edx, [ebp+oep]
call edx ; now, you're at the OEP of the original binary
Or this:
mov ecx, [ebp+oep]
...
5
votes
1
answer
2k
views
Using a VMM/hypervisor to monitor guest OS execution?
I would like to set up a virtual machine monitor using Microsoft Hyper-V, VMware vSphere/ESX, Xen, or any other alternative hypervisor solution that is able to monitor the execution of a guest OS (a ...