ggpabuk/hv

Demo: https://youtu.be/-wO10OQpHoU?si=ynFe3dHBK_-rlJAj

Funny AMD-V baremetal hypervisor POC for unprivileged memory inspection

• AMD-V ONLY
• baremetal
• uefi runtime driver
• ICR shorthard handling
• Tested on my PC
• poc (like untested x2apic, SVM MSRs protection dirty trick, leak of clean state handling)

References

1. https://github.com/freebsd/freebsd-src/blob/00b0ea95dfb3052ab94b5e9bf268f2b941b3f874/sys/amd64/vmm/amd/vmcb.h
2. https://github.com/tandasat/HelloAmdHvPkg/tree/master
3. https://tandasat.github.io/Hypervisor-101-in-Rust
4. AMD64 Architecture Programmer’s Manual Volumes 1–5
5. Intel® 64 and IA-32 Architectures Software Developer’s Manual
6. https://github.com/Shtan7/VisualUEFI-2.0 (vmware debug trick)
7. https://wiki.osdev.org
8. https://github.com/tianocore/edk2
9. OST2 x86-64 OS Internals course

i wont reference references myself but have this for fever reading :)

3-rd party licenses

• /hde64/ - Copyright (c) 2008-2009, Vyacheslav Patkov.
• /vmcb.h - Copyright (c) 2013 Anish Gupta (akgupt3@gmail.com)