正在加载视频...

视频加载失败

Tracing every usermode call on Windows-on-ARM. Clean install, no breakpoints, no hooks, memory not modified in any way. Virtually undetectable. Purely from hypervisor.

20,084 次观看 • 4 个月前 •via X (Twitter)

9 条评论

FallenOne 的头像
FallenOne4 个月前

how? and how does this differ from x86? nobody bothered to make something like riot vanguard for arm yet, or?

wout 的头像
wout4 个月前

Sick😎😎😎

7alken 的头像
7alken4 个月前

hi, nice, question is why; I ditched win11 because his hypervisor killed my loved virtualbox; not friend of any kind of even so-called """ethical""" hacking; cheers; ;-)

Petr Beneš 的头像
Petr Beneš4 个月前

This works with any guest OS with minimal changes. I chose Windows since I'm most familiar with its internals.

Petr Beneš 的头像
Petr Beneš4 个月前

... and as for why: because nobody else has done it yet :)

vivi 的头像
vivi4 个月前

What hardware is this running on? I've been thinking about learning some ARM64.

Petr Beneš 的头像
Petr Beneš4 个月前

Mac mini M2

zeishr 的头像
zeishr4 个月前

really cool!

Alexander Riccio (@co2trackers) 的头像
Alexander Riccio (@co2trackers)4 个月前

@drProct0r O wow I know I'm behind on windows internals because I still don't recognize the _o__ functions

相关视频