https://github.com/archercreat/vm_jit

VM devirtualization PoC based on AsmJit and llvm
https://github.com/archercreat/vm_jit

asmjit llvm reverse-engineering vm

Last synced: 3 months ago
JSON representation

VM devirtualization PoC based on AsmJit and llvm

• Host: GitHub
• URL: https://github.com/archercreat/vm_jit
• Owner: archercreat
• Created: 2021-09-03T11:09:48.000Z (over 3 years ago)
• Default Branch: main
• Last Pushed: 2021-09-14T12:58:45.000Z (over 3 years ago)
• Last Synced: 2023-03-10T00:21:55.555Z (almost 2 years ago)
• Topics: asmjit, llvm, reverse-engineering, vm
• Language: C++
• Homepage:
• Size: 241 KB
• Stars: 59
• Watchers: 4
• Forks: 20
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# vm_jit

PoC vm devirtualization based on `AsmJit`. The binary was taken from `YauzaCTF 2021` competition.

You are welcome to try to solve it yourself, the binary is in `challenge bin` folder.

### Update 09/07/21

I've made llvm lifter, you can find it in `vm_jit/lifter` folder.

I've also attached devirtualized binaries, you can find them in `devirt` folder.

## Dependencies

This project relies on three libraries `zydis`, `llvm 12` and `asmjit`. Install them via vcpkg:

```

vcpkg.exe install zydis

vcpkg.exe install llvm

vcpkg.exe install asmjit

```

## Before

![](https://i.imgur.com/RNKUkui.png)

## Asmjit version

![](https://i.imgur.com/Rm2eLDn.png)

## LLVM version

![](https://i.imgur.com/o26e052.png)