执空法坛

  博客园 :: 首页 :: 新随笔 :: 联系 :: 订阅 :: 管理 ::

随笔分类 -  VM Detect

利用IDT表地址检测VM
摘要：Red Pill... or how to detect VMM using (almost) one CPU instruction Joanna Rutkowska http://invisiblethings.org/ November 2004 Swallowing the Red Pill is more or less equivalent to the following code ... 阅读全文
posted @ 2008-12-15 19:30 执空法坛 阅读(668) 评论(0) 推荐(0)