Mathieu Tarral

awesome-virtualization. Collection of resources about Virtualization

checksec.py. Checksec tool in Python, Rich output. Based on LIEF

pyvmidbg. LibVMI-based debug server, implemented in Python. Building a guest aware, stealth and agentless full-system debugger

libmicrovmi. A cross-platform unified Virtual Machine Introspection API library

r2vmi. Hypervisor-Level Debugger based on Radare2 / LibVMI, using VMI IO and debug plugins

osw-fs-windows. A git history of Windows filesystems

oswatcher. A framework to track the evolution of Operating Systems over time

docker-kdesrc-build. Dockerfiles to compile KDE source code into Docker with kdesrc-build script

vid-sys. Rust unsafe bindings for Vid API (Hyper-V)

libsysinfo. Extracts information about running processes and network connections from the virtual filesystem /proc

protonvpn-nm-import. Script to import ProtonVPN configuration files into NetworkManager automatically

linux-sysinternals. CMake

kvm-vmi. KVM-based Virtual Machine Introspection

packer-templates-winxp. Batchfile

radare2-extras. Source graveyard and random candy for radare2

CNAF. Source code used by the French CNAF (Caisse Nationale des Allocations Familiales)

xenstore. Rust bindings to Xenstore

vagrant-xen-pyvmidbg. Vagrant box to work on pyvmidbg project

kvmi. Rust bindings to KVM's introspection libkvmi library

protonvpn-vm. Preconfigured ProtonVPN setup in a virtual machine

xenctrl. Rust

libvmi-rs. Rust reimplementation of LibVMI

docker-gui-app. Summary of the techniques available to run gui applications inside docker

fdp. Rust bindings on FDP (Fast Debugging Protocol) VirtualBox introspection library

packer-flare. Packer templates to build your FLARE VM from scratch

vagrant-icebox. A vagrant environment to develop Icebox and VirtualBox VMI

windows_internals.

kAFL. A fuzzer for full VM kernel/driver targets

xenevtchn. Rust bindings to xenevtchn library

kvm. Fork of KVM with Virtual Machine Introspection patch

nitro. KVM-based Virtual Machine Introspection

awesome. :sunglasses: Curated list of awesome lists

unbound-formula. Install and configure the Unbound DNS server

deadlands. :bomb: A simple kernel-level rootkit

Damn_Vulnerable_Kernel_Module. Damn Vulenerable Kernel Module for kernel fuzzing

fdp-sys. Rust unsafe bindings on FDP (Fast Debugging Protocol) library for VirtualBox Introspection

Hyntrospect. PowerShell

reactos. A free Windows-compatible Operating System

malboxes. Builds malware analysis Windows VMs so that you don't have to.

volatility3. Volatility 3.0 development

see. Sandboxed Execution Environment

xenevtchn-sys. Rust bindings for xenevtchn library

kvmi-sys. Rust bindings for KVM's introspection libkvmi library

ipaddr-py. Google's Python IP address manipulation library

ccc-linux-guest-hardening-docs. HTML

Wenzel.

radare2. unix-like reverse engineering framework and commandline tools

volatility. An advanced memory forensics framework

xenvmevent-sys. Rust unsafe bindings for Xen VM event definitions

vagrant-xen-r2vmi. Vagrant box to work on r2vmi project

xenforeignmemory. Safe Rust bindings to xenforeignmemory

aff4. The Advanced Forensic File Format