Video wird geladen...
Video konnte nicht geladen werden
Tracing every usermode call on Windows-on-ARM. Clean install, no breakpoints, no hooks, memory not modified in any way. Virtually undetectable. Purely from hypervisor.
20,095 Aufrufe • vor 4 Monaten •via X (Twitter)
9 Kommentare

FallenOnevor 4 Monaten
how? and how does this differ from x86? nobody bothered to make something like riot vanguard for arm yet, or?

woutvor 4 Monaten
Sick😎😎😎

7alkenvor 4 Monaten
hi, nice, question is why; I ditched win11 because his hypervisor killed my loved virtualbox; not friend of any kind of even so-called """ethical""" hacking; cheers; ;-)

Petr Benešvor 4 Monaten
This works with any guest OS with minimal changes. I chose Windows since I'm most familiar with its internals.

Petr Benešvor 4 Monaten
... and as for why: because nobody else has done it yet :)

vivivor 4 Monaten
What hardware is this running on? I've been thinking about learning some ARM64.

Petr Benešvor 4 Monaten
Mac mini M2

zeishrvor 4 Monaten
really cool!

Alexander Riccio (@co2trackers)vor 4 Monaten
@drProct0r O wow I know I'm behind on windows internals because I still don't recognize the _o__ functions

