anti-vm 开源项目推荐（45 个）

ayoubfaouzi /al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

NotRequiem /VMAware

高级虚拟机检测库和工具

KiExitDispatcher /GoDefender

反软件化、反调试、反虚拟机、反虚拟机、反调试、反沙盒、反沙盒、VM Detect 包。只限Windows。

CheckPointSW /Evasions

Evasions encyclopedia gathers methods used by malware to evade detection when run in virtualized environment. Methods are grouped into categories for ease of searching and understanding. Also provided are code samples, signature recommendations and countermeasures within each category for the described techniques.

AdvDebug /AntiCrack-DotNet

.NET Project containing plenty of advanced techniques to detect various types of malicious actions on your software, with syscall support.

NavyTitanium /Fake-Sandbox-Artifacts

This script allows you to create various artifacts on a bare-metal Windows computer in an attempt to trick malwares that looks for VM or analysis tools

void-stack /Hypervisor-Detection

Detects virtual machines and malware analysis environments

Babyhamsta /Malcrow

A Malware Scarecrow for Windows 10/11 with a user-friendly touch.

PicoJr /inside-vm

Detect if code is running inside a virtual machine (x86 and x86-64 only).

uzokingkong /Anti-VM

anti-VM, sandbox-detection, VM-detection,rust, windows, stealth-loader, PoC

at0m-b0mb /VMware-Hidden-Mode

VMware 隐形修补工具在恶意软件分析实验室中破除虚拟机检测——修补 VMX 配置和访客虚拟机以实现反反虚拟机规避

vibheksoni /ferrox

Windows infostealer in Rust with polymorphic builds, Hell's Gate syscalls, and compile-time encryption. Educational use only.

ktn1703 /PyCool-Obfuscator

shit python obf

srlkhmi /DeViL

It is demonstration tool that contains collection techniques to detect the virtualisation environment in Linux Operating System.

cev-api /vm-detect

VMDetect is a Python based Windows VM detection and environment forensics tool that reads ACPI/SMBIOS firmware tables and system artifacts to expose virtual machines, even if people try to hide them!

sysopfb /VM_Timing_Detect

该项目在 GitHub 上没有填写描述

ntddk /blue

Some anti QEMU trick used by in-the-wild malware.

vim951 /apate

Apate performs anti-debugging, anti-VM and anti-sandbox tests, to see if your linux system is able to stay under the radar.

Print3M /Anti-VM

Windows-based implementation of several anti-vm techniques used in malware development.

reverseame /pinVMShield

A pintool for protecting a sandbox application of common anti-virtualmachine and anti-sandbox detection techniques