|
Selling fully undetected Hypervisor with SDK for both AMD and Intel machines.
Hello, I am working on a fully functional Hypervisor subsystem that stealthily runs using Windows' bare metal hypervisor(Core Isolation, HVCI, VBS). All functionality within this hypervisor is supported on both AMD and Intel machines. Additionally, all physical pages that contain altered or custom hypervisor data are hidden from the guest operating system. a single fully documented SDK header will be supplied to interact with the hypervisor from usermode(or any other CPL <= 3 code region within the guest).
Its current features include but are not limited to the following:
1) A fully working process API that grants you access to a target process
address space, even when its CR3 is encrypted by the leading
anti-cheat software. Relevant process information is also made
available through this API like the PEB and EPROCESS pointers.
The target process memory can be mapped to a contiguous range
of pages specified by the user. Allowing for seamless memory
introspection of PE images.
2) The ability to add custom VMEXIT handlers into the hypervisor, entirely
from usermode. Allowing you to make features or configurations
for the hypervisor at OS runtime.
3) Direct physical memory mapping.
I aim to discuss many more possibilities and features within this project with someone who is interested in paying for my services.
If this brief post has sparked some interest, please feel free to contact me on the following discord: rdtsc
Thank you for your time.
|
