From Collaborative RCE Tool Library
VM Detection Test Tools
| Tool name: | SourPill VM Detector |
| ||
|---|---|---|---|---|
| Author: | TiGa | |||
| Website: | N/A | |||
| Current version: | 1.0 | |||
| Last updated: | August 17, 2007 | |||
| Direct D/L link: | Locally archived copy | |||
| License type: | Free | |||
| Description: | Here is a little program I made to help with VM detection. It reads the cpu name and checks the average RDTSC timing of the CPUID instruction over 100000 executions. CPUID takes around 350 cycles to execute on a Native OS but around 2500-3500 cycles in a VM. It should also notice a timing difference if VMX is enabled and used for intel cpus due to the TLB having to be rewritten in part. The only thing i think that could fool it is Blue Chicken in the New Blue Pill. I hope it can be of use to somebody. | |||
| Also listed in: | (Not listed in any other category) | |||
| More details: | Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry) | |||
Feed containing all updates and additions for this category.
Feed containing all updates and additions for this category, including sub-categories.
