awesome-virtualization
Collection of resources about Virtualization
https://github.com/eric-erki/awesome-virtualization
Last synced: about 20 hours ago
JSON representation
-
Attacking Hypervisors
-
5 Days to Virtualization
- Blackhat 2010 - Hacking the Hypervisor
- Software Attacks on Hypervisor Emulation of Hardware - [[Slides]](https://www.troopers.de/downloads/troopers17/TR17_Attacking_hypervisor_through_hardwear_emulation.pdf)
- Lessons Learned from Eight Years of Breaking Hypervisors - [[Slides]](https://www.blackhat.com/docs/eu-14/materials/eu-14-Wojtczuk-Lessons-Learned-From-Eight-Years-Of-Breaking-Hypervisors.pdf)
- Attacking Hypervisors Using Firmware And Hardware - [[Slides]](http://c7zero.info/stuff/AttackingHypervisorsViaFirmware_bhusa15_dc23.pdf)
- The Arms Race Over Virtualization - [[Slides]](https://www.blackhat.com/docs/us-16/materials/us-16-Luan-Ouroboros-Tearing-Xen-Hypervisor-With-The-Snake.pdf)
- Blackhat 2010 - Hacking the Hypervisor
-
Hyper-V
- A Dive in to Hyper-V Architecture & Vulnerabilities
- Hardening Hyper-V through offensive security research - Black Hat
- Growing Hypervisor 0day with Hyperseed
- VBS and VSM Internals
- Ring 0 to Ring -1 Exploitation with Hyper-V IPC
- Security Assessment of Microsoft Hyper-V
- Fuzzing para-virtualized devices in Hyper-V
- Awesome Hyper-V Exploitation
-
KVM
- Virtualization under attack: Breaking out of KVM - [[Slides]](http://www.hakim.ws/DEFCON19/Speakers/Elhage/DEFCON-19-Elhage-Virtualization-Under-Attack.pdf)
- Performant Security Hardening of KVM by Steve Rutherford - [[Slides]](http://www.linux-kvm.org/images/3/3d/01x02-Steve_Rutherford-Performant_Security_Hardening_of_KVM.pdf)
-
VirtualBox
- Unboxing your virtualBox - [[Slides]](https://raw.githubusercontent.com/phoenhex/files/master/slides/unboxing_your_virtualboxes.pdf)
- Breaking Out of VirtualBox through 3D Acceleration - [[Slides]](https://www.coresecurity.com/system/files/publications/2016/05/corelabs-Breaking_Out_of_VirtualBox_through_3D_Acceleration-Francisco_Falcon.pdf)
- VirtualBox VMSVGA VM Escape
- VirtualBox NAT DHCP/BOOTP server vulnerabilities
-
VMware
- Cloudburst: Hacking 3D And Breaking Out Of Vmware
- The Great Escapes Of Vmware: A Retrospective Case Study Of VMWare Guest-To-Host Escape Vulnerabilities
- Out of the Truman Show: VM Escape in VMware Gracefully
- Control Register Access Exiting and Crashing VMware
- Out of the Truman Show: VM Escape in VMware Gracefully
-
Xen
- Ouroboros: Tearing Xen Hypervisor With the Snake
- Subverting the Xen hypervisor
- Preventing and Detecting Xen Hypervisor Subversions
- Bluepilling the Xen Hypervisor
- XenPwn: Breaking paravirtualized devices - [[Slide]](https://www.blackhat.com/docs/us-16/materials/us-16-Wilhelm-Xenpwn-Breaking-Paravirtualized-Devices-wp.pdf)
- Advanced Exploitation: Xen Hypervisor VM Escape
- Xen exploitation part 1: XSA-105, from nobody to root
- Xen exploitation part 2: XSA-148, from guest to host
-
-
Books
-
Courses
-
CVEs
-
Hyper-V
- Wandering through the Shady Corners of VMware Workstation/Fusion
- CVE-2018-2844: From Compiler Optimization to Code Execution - VirtualBox VM Escape
- Better slow than sorry - VirtualBox 3D acceleration considered harmful
- VirtualBox 3D Acceleration: An Acceleration Attack Surface
- A bunch of Red Pills: VMware Escapes
- Pandavirtualization: Exploiting the Xen hypervisor
- Analyzing a Patch of a Virtual Machine Escape on VMware
- SSD Advisory – Oracle VirtualBox Multiple Guest to Host Escape Vulnerabilities
- CVE-2017-3558: Oracle VM VirtualBox - Guest-to-Host Privilege Escalation via Broken Length Handling in slirp Copy
-
-
Hypervisor Development
-
5 Days to Virtualization
- Day 0: Virtual Environment Setup, Scripts, and WinDbg
- Day 1: Introduction to Virtualization, Type Definitions, and Support Testing
- Day 2: Entering VMX Operation, Explaining Implementation Requirements
- Day 3: The VMCS, Component Encoding, and Multiprocessor Initialization
- Day 4: VMCS Initialization, Segmentation, and Operation Visualization
- Day 5: The VM-exit Handler, Event Injection, Context Modifications, and CPUID Emulation
-
Hypervisor From Scratch
- Part 1: Basic Concepts & Configure Testing Environment
- Part 2: Entering VMX Operation
- Part 3: Setting up Our First Virtual Machine
- Part 4: Address Translation Using Extended Page Table (EPT)
- Part 5: Setting up VMCS & Running Guest Code
- Part 6: Virtualizing An Already Running System
- Part 7: Using EPT & Page-Level Monitoring Features
-
-
Mainstream Hypervisors Documentation
-
Hyper-V
-
KVM
-
QEMU
-
VirtualBox
-
VMware
-
Xen
-
-
Malware analysis
-
Papers
- A comparison of software and hardware techniques for x86 virtualization by K. Adams and O. Agesen (2006)
- Bringing Virtualization to the x86 Architecture with the Original VMware Workstation by Edouard Bugnion, Scott Devine, Mendel Rosenblum, Jeremy Sugerman, And Edward Y. Wang
- The evolution of an x86 virtual machine monitor by O. Agesen, A. Garthwaite, J. Sheldon, and P. Subrahmanyam
- Formal Requirements for Virtualizable Third Generation Architectures by Gerald J. Popek & Robert P. Goldberg
- Xen and the Art of Virtualization by Paul Barham, Boris Dragovic, Keir Fraser, Steven Hand, Tim Harris, Alex Ho, Rolf Neugebauer, Ian Pratt, Andrew Warfield
- Understanding Full Virtualization, Paravirtualization and Hardware Assisted Virtualization by VMWare
- Dynamic Binary Translation from x86-32 code to x86-64 code for Virtualization by Yu-hsin Chen.
- MemoryRanger Prevents Hijacking FILE_OBJECT Structures in Windows Kernel by Igor Korkin (2019)
- The evolution of an x86 virtual machine monitor by O. Agesen, A. Garthwaite, J. Sheldon, and P. Subrahmanyam
- Xen and the Art of Virtualization by Paul Barham, Boris Dragovic, Keir Fraser, Steven Hand, Tim Harris, Alex Ho, Rolf Neugebauer, Ian Pratt, Andrew Warfield
- Modern Operating System 4th Edition (Chapter: Virtualization and the cloud) by Andrew Tanembaum
- Modern Operating System 4th Edition (Chapter: Virtualization and the cloud) by Andrew Tanembaum
- Modern Operating System 4th Edition (Chapter: Virtualization and the cloud) by Andrew Tanembaum
- Modern Operating System 4th Edition (Chapter: Virtualization and the cloud) by Andrew Tanembaum
-
Research Projects
- BitVisor
- HOSS
- ACRN
- HypSec
- ramooflax
- TinyVM
- jailhouse
- HOSS
- Bareflank
- SimpleVisor
- HyperPlatform
- rustyvisor
- HyperBone
- VivienneVMM
- hypervisor-for-beginners
- Intel HAXM
- ksm
- crosvm
- Firecracker
- SimpleSvm
- hvpp
- gbhv
- applepie
- boxy
- nemu
- gvisor
- rust-vmm
- MemoryRanger
- ZeldaOS.x86_64
- vbh
- zpp_hypervisor
- orange_slice
- cloud-hypervisor
- Xvisor
- kHypervisor
-
Virtual Machine Introspection
-
5 Days to Virtualization
- Zero-Footprint Guest Memory Introspection from Xen by Mihai Dontu - [[Slides]](https://www.slideshare.net/xen_com_mgr/zero-footprint-guest-memory-introspection-from-xen) [[Update]](http://events17.linuxfoundation.org/sites/events/files/slides/Zero-Footprint%20Guest%20Memory%20Introspection%20with%20Xen.pdf)
- Hypervisor memory introspection at the next level
- Bringing Commercial Grade Virtual Machine Introspection to KVM by Mihai Donțu - [[Slides]](http://events17.linuxfoundation.org/sites/events/files/slides/Zero-Footprint%20Guest%20Memory%20Introspection%20with%20Xen.pdf)
- Hypervisor-based, hardware-assisted system monitoring
- Virtual Machine Introspection to Detect and Protect
- Who Watches The Watcher? Detecting Hypervisor Introspection from Unprivileged Guests
- Hypervisor Memory Forensics - [[Slides]](http://s3.eurecom.fr/~emdel/talks/grazianolanzi_hitb.pdf)
-
Categories
Sub Categories
Keywords
hypervisor
7
virtualization
6
sandbox
4
linux
4
virtual-machine
3
containers
2
kernel
2
windows
2
vt-x
2
oci
1
kubernetes
1
docker
1
stl
1
gsl
1
cxx
1
bareflank
1
serverless
1
rust
1
oversubscription
1
open-source
1
minimalist
1
windows-kernel
1
driver
1
hyper-v
1
x64
1
introspection
1
ept
1
vmm
1
qemu
1
hardware-acceleration
1
x86-64
1
reverse-engineering
1
introspect
1
real-time
1
vmx
1
smp
1
hardware-assisted
1
rust-vmm
1
kvm
1
cloud-workloads
1
c
1