virtual-machine.md

Virtual Machines

• sickcodes/Docker-OSX - Run macOS VM in a Docker! Run near native OSX-KVM in Docker! X11 Forwarding! CI/CD for OS X Security Research! Docker mac Containers
• SinaKarvandi/Hypervisor-From-Scratch - Source code of a multiple series of tutorials about the hypervisor
• firecracker-microvm/firecracker - Secure and fast microVMs for serverless computing
• packer: Build Automated Machine Images
• StefanScherer/adfs2 - Multi Vagrant environment with Active Directory - 2018停更
• JaanusKaapPublic/HyperViper - Toolkit for Hyper-V security research - 2019停更
• nongiach/arm_now - a qemu powered tool that allows instant setup of VM for testing binaries built for different CPU architectures

Hardening

• https://github.com/kkamagui/alcatraz - A Practical Hypervisor Sandbox to Prevent Escapes from the KVM/QEMU and KVM-based MicroVMs

QEMU

• MarginResearch/cannoli - High-performance QEMU memory and instruction tracing

VM Tools

• JamesCooteUK/SharpSphere - .NET Project for Attacking vCenter - 使用 vCenter API，对安装了vmtools的Windows机器进行操作，可以执行命令、读写文件等等
  • https://github.com/RicterZ/PySharpSphere

Exploits

• hustdebug/scavenger - This is an exploit for an uninitialized free in nvme:nvme_map_prp(). For more information, see the writeup the slides for the talk in Blackhat Asis 2021
• guardicore/vmware_guest_auth_bypass - two scripts related to the VIX authentication bypass presented in Black Hat
• xairy/vmware-exploitation - A bunch of links related to VMware escape exploits