PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

A virtual journey: From hardware virtualization to Hyper-V's Virtual Trust Levels

blog.quarkslab.com | research | #windows | #reverse-engineering | #virtualization | #hyper-v | #security | #vt-x
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A step-by-step reverse engineering journey into Hyper-V's internals, explaining how Intel VT-x hardware virtualization enables Virtual Trust Levels (VTLs) and memory segregation in Windows.
Published
Collected

Related coverage

research · eshard.com
Discover esReven's knowledge modules for Reverse Engineering
Explore the world of reverse-engineering and master advanced techniques with esReven's new knowledge modules.
research · eshard.com
esReven 2023.04 is out!
esReven 2023.10 is here! Explore powerful updates including a new Python API for user-defined types, PDB file uploads, and binary mapping. Level up your reverse engineering with enhanced malware analysis use cases and integrated network activity tools.
blog · netspi.com
Virtualization Security Resources
A starter collection of virtualization security resources: hardening guides for Hyper-V, VMware vSphere, and Xen, plus references from DISA STIG, CSA, SANS, and CIS.
research · blog.quarkslab.com
The IGVM File Format
Quarkslab walks through the IGVM file format, which bundles a VM's BIOS/OVMF, kernel and initrd for secure launch across isolation stacks like AMD SEV-SNP and Intel TDX.
research · blog.quarkslab.com
Kubevirt security audit
Quarkslab's KubeVirt audit via OSTIF and the Sovereign Tech Fund: 15 vulnerabilities, including arbitrary host file read/write (CVE-2025-64324) and an aggregation-layer auth bypass.
research · blog.quarkslab.com
Reversing Windows Container, episode II: Silo to Server Silo
Episode two of reversing Windows containers: how the Host Compute Service converts a Silo into a Server Silo, plus kernel-side mechanisms such as syscall limiting inside Silos.
Back