mirrors/pafish
1
0
Fork 0
mirror of https://github.com/a0rtega/pafish synced 2024-11-24 23:29:39 +03:00
Code Issues Packages Projects Releases Wiki Activity

Added pseudo-device vm detection

Browse Source
This commit is contained in:
Thorsten Sick 2014-02-17 09:56:19 +01:00
parent 7830b7a7d6
commit 2902f5f21f
3 changed files with 27 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
pafish/main.c
View File

@ -207,6 +207,13 @@ int main(int argc, char *argv[])
else {
print_not_traced();
}
printf("[*] Looking for pseudo device ");
if (vbox_pseudodev() == 0) {
}
else {
print_not_traced();
}
/* VMware detection tricks */
printf("\n[-] VMware detection\n");

18
pafish/vbox.c
View File

@ -228,3 +228,21 @@ int vbox_mac() {
return res;
}
/**
* Checking for the VirtualBox pseudo device VBoxMiniRdrDN
**/
int vbox_pseudodev() {
int res=1;
HANDLE h;
h = CreateFile("\\\\.\\VBoxMiniRdrDN", GENERIC_READ, FILE_SHARE_READ, NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL);
if (h != INVALID_HANDLE_VALUE){
write_log("VirtualBox traced using MAC starting with 08:00:27");
print_traced();
write_trace("hi_virtualbox");
res = 0;
CloseHandle(h);
}
return res;
}

2
pafish/vbox.h
View File

@ -16,4 +16,6 @@ int vbox_sysfile2();
int vbox_mac();
int vbox_pseudodev();
#endif