{"id":23739414,"url":"https://github.com/iaoedsz2008/libvirt-stealth","last_synced_at":"2025-09-04T14:33:14.292Z","repository":{"id":196455024,"uuid":"396398086","full_name":"iaoedsz2008/libvirt-stealth","owner":"iaoedsz2008","description":"Bypass virtual machine detection","archived":false,"fork":false,"pushed_at":"2022-06-25T16:14:17.000Z","size":29,"stargazers_count":16,"open_issues_count":0,"forks_count":1,"subscribers_count":1,"default_branch":"master","last_synced_at":"2023-09-25T13:01:31.379Z","etag":null,"topics":["kvm","libvirt","linux","qemu","virsh","virtualization","x86-64"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/iaoedsz2008.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null}},"created_at":"2021-08-15T15:32:15.000Z","updated_at":"2023-09-25T13:01:32.065Z","dependencies_parsed_at":null,"dependency_job_id":"a4a5779b-05b8-4f2e-b452-da1a29169c94","html_url":"https://github.com/iaoedsz2008/libvirt-stealth","commit_stats":null,"previous_names":["iaoedsz2008/libvirt-stealth"],"tags_count":1,"template":null,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/iaoedsz2008%2Flibvirt-stealth","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/iaoedsz2008%2Flibvirt-stealth/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/iaoedsz2008%2Flibvirt-stealth/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/iaoedsz2008%2Flibvirt-stealth/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/iaoedsz2008","download_url":"https://codeload.github.com/iaoedsz2008/libvirt-stealth/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":231970924,"owners_count":18453924,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["kvm","libvirt","linux","qemu","virsh","virtualization","x86-64"],"created_at":"2024-12-31T09:36:51.400Z","updated_at":"2024-12-31T09:37:51.303Z","avatar_url":"https://github.com/iaoedsz2008.png","language":null,"funding_links":[],"categories":["Others"],"sub_categories":[],"readme":"# libvirt-stealth\n\nThese configuration files can bypass common anti-vm detection\n\nBut this does not mean that all anti-vm can be bypassed\n\n## modified\n\n- disable all hyperv features\n  ```\n  \u003chyperv\u003e\n    \u003crelaxed state='off'/\u003e\n    \u003cvapic state='off'/\u003e\n    \u003cspinlocks state='off'/\u003e\n    \u003cvpindex state='off'/\u003e\n    \u003cruntime state='off'/\u003e\n    \u003csynic state='off'/\u003e\n    \u003cstimer state='off'/\u003e\n    \u003creset state='off'/\u003e\n    \u003cvendor_id state='off'/\u003e\n    \u003cfrequencies state='off'/\u003e\n    \u003creenlightenment state='off'/\u003e\n    \u003ctlbflush state='off'/\u003e\n    \u003cipi state='off'/\u003e\n    \u003cevmcs state='off'/\u003e\n  \u003c/hyperv\u003e\n  ```\n\n- hide kvm state\n  ```\n  \u003ckvm\u003e\n    \u003chidden state='on'/\u003e\n  \u003c/kvm\u003e\n  ```\n\n- hide cpuid status and disable nested virtualization\n  ```\n  \u003ccpu mode='host-passthrough' check='none'\u003e\n    \u003ctopology sockets='1' cores='2' threads='1'/\u003e\n    \u003cfeature policy='disable' name='svm'/\u003e\n    \u003cfeature policy='disable' name='vmx'/\u003e\n    \u003cfeature policy='disable' name='hypervisor'/\u003e\n  \u003c/cpu\u003e\n  ```\n\n- remove balloon device\n  ```\n  \u003cmemballoon model='none'/\u003e\n  ```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fiaoedsz2008%2Flibvirt-stealth","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fiaoedsz2008%2Flibvirt-stealth","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fiaoedsz2008%2Flibvirt-stealth/lists"}