├── .editorconfig ├── .gitattributes ├── .gitignore ├── .gitmodules ├── LICENSE ├── README.md ├── img ├── Capture.JPG ├── IntroducingBluePill.ppt.pdf.png ├── PatchGuardLSTAR_Hook_Detection.JPG ├── VMCB-STRUCT (1).jpg ├── VMCB_Overview_1-5x.png └── vmsave.drawio.png ├── krakensvm.sln └── krakensvm ├── .gitignore ├── hooks ├── hook_utils.cpp ├── hook_utils.hpp ├── pe.cpp ├── pe.hpp ├── syscall_handler(deprecated).asm ├── syscall_hook.cpp └── syscall_hook.hpp ├── ia32e ├── control_registers.hpp ├── descriptors_info.cpp ├── descriptors_info.hpp ├── paging.cpp ├── paging.hpp ├── segment_intrins.asm └── segment_intrins.h ├── inc ├── hv_util.hpp ├── krakensvm.hpp ├── vmcb.hpp └── vmexit_handler.hpp ├── kdriver.cpp ├── krakensvm.inf ├── krakensvm.vcxproj ├── krakensvm.vcxproj.filters └── svm ├── debugger_info.cpp ├── krakensvm.cpp ├── vmcb.cpp ├── vmexecute.asm └── vmexit_handler.cpp /.editorconfig: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/.editorconfig -------------------------------------------------------------------------------- /.gitattributes: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/.gitattributes -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/.gitignore -------------------------------------------------------------------------------- /.gitmodules: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/.gitmodules -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/README.md -------------------------------------------------------------------------------- /img/Capture.JPG: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/img/Capture.JPG -------------------------------------------------------------------------------- /img/IntroducingBluePill.ppt.pdf.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/img/IntroducingBluePill.ppt.pdf.png -------------------------------------------------------------------------------- /img/PatchGuardLSTAR_Hook_Detection.JPG: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/img/PatchGuardLSTAR_Hook_Detection.JPG -------------------------------------------------------------------------------- /img/VMCB-STRUCT (1).jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/img/VMCB-STRUCT (1).jpg -------------------------------------------------------------------------------- /img/VMCB_Overview_1-5x.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/img/VMCB_Overview_1-5x.png -------------------------------------------------------------------------------- /img/vmsave.drawio.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/img/vmsave.drawio.png -------------------------------------------------------------------------------- /krakensvm.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm.sln -------------------------------------------------------------------------------- /krakensvm/.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/.gitignore -------------------------------------------------------------------------------- /krakensvm/hooks/hook_utils.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/hooks/hook_utils.cpp -------------------------------------------------------------------------------- /krakensvm/hooks/hook_utils.hpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/hooks/hook_utils.hpp -------------------------------------------------------------------------------- /krakensvm/hooks/pe.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/hooks/pe.cpp -------------------------------------------------------------------------------- /krakensvm/hooks/pe.hpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/hooks/pe.hpp -------------------------------------------------------------------------------- /krakensvm/hooks/syscall_handler(deprecated).asm: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/hooks/syscall_handler(deprecated).asm -------------------------------------------------------------------------------- /krakensvm/hooks/syscall_hook.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/hooks/syscall_hook.cpp -------------------------------------------------------------------------------- /krakensvm/hooks/syscall_hook.hpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/hooks/syscall_hook.hpp -------------------------------------------------------------------------------- /krakensvm/ia32e/control_registers.hpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/ia32e/control_registers.hpp -------------------------------------------------------------------------------- /krakensvm/ia32e/descriptors_info.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/ia32e/descriptors_info.cpp -------------------------------------------------------------------------------- /krakensvm/ia32e/descriptors_info.hpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/ia32e/descriptors_info.hpp -------------------------------------------------------------------------------- /krakensvm/ia32e/paging.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/ia32e/paging.cpp -------------------------------------------------------------------------------- /krakensvm/ia32e/paging.hpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/ia32e/paging.hpp -------------------------------------------------------------------------------- /krakensvm/ia32e/segment_intrins.asm: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/ia32e/segment_intrins.asm -------------------------------------------------------------------------------- /krakensvm/ia32e/segment_intrins.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/ia32e/segment_intrins.h -------------------------------------------------------------------------------- /krakensvm/inc/hv_util.hpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/inc/hv_util.hpp -------------------------------------------------------------------------------- /krakensvm/inc/krakensvm.hpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/inc/krakensvm.hpp -------------------------------------------------------------------------------- /krakensvm/inc/vmcb.hpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/inc/vmcb.hpp -------------------------------------------------------------------------------- /krakensvm/inc/vmexit_handler.hpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/inc/vmexit_handler.hpp -------------------------------------------------------------------------------- /krakensvm/kdriver.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/kdriver.cpp -------------------------------------------------------------------------------- /krakensvm/krakensvm.inf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/krakensvm.inf -------------------------------------------------------------------------------- /krakensvm/krakensvm.vcxproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/krakensvm.vcxproj -------------------------------------------------------------------------------- /krakensvm/krakensvm.vcxproj.filters: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/krakensvm.vcxproj.filters -------------------------------------------------------------------------------- /krakensvm/svm/debugger_info.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/svm/debugger_info.cpp -------------------------------------------------------------------------------- /krakensvm/svm/krakensvm.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/svm/krakensvm.cpp -------------------------------------------------------------------------------- /krakensvm/svm/vmcb.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/svm/vmcb.cpp -------------------------------------------------------------------------------- /krakensvm/svm/vmexecute.asm: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/svm/vmexecute.asm -------------------------------------------------------------------------------- /krakensvm/svm/vmexit_handler.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/wizardengineer/krakensvm-mg/HEAD/krakensvm/svm/vmexit_handler.cpp --------------------------------------------------------------------------------