Releases: kernelwernel/VMAware
Releases · kernelwernel/VMAware
1.7.1 Release
- added
VM::SPOOFABLEflag to enable easily spoofable techniques - added VM types as summary output
- added CLI options for VM type details (
-tor--type) - added
QEMU+KVM Hyper-V EnlightenmentVM brand - added better CLI indications such as techniques that require permissions
- changed so that spoofable techniques are no longer run by default, unless
VM::SPOOFABLEis inputted.
1.7 Release
-
added better heuristic checks for Hyper-V host virtualisation
-
added argument handler improvements to the CLI
-
added VM type information to the CLI
-
added 4 new techniques:
VM::CPUID_SIGNATUREVM::HYPERV_BITMASKVM::KVM_BITMASKVM::KGT_SIGNATURE
-
added 7 new VM brands:
JailhouseApple VZIntel KGT (Trusty)VMware FusionMicrosoft Azure Hyper-VXbox NanoVisor (Hyper-V)SimpleVisor
-
renamed VM brand "Thread Expert" to "ThreatExpert" (i fucked up)
-
renamed
VM::HYPERV_CPUIDtechnique toVM::CPUID_BITSET -
removed
VM::EXTREMEsettings flag -
removed 2 techniques (both due to potential false positives):
VM::CPUID_SPACINGVM::CPUID_0X4
1.6 Release
- added 2 new variables:
VM::technique_countVM::technique_vectorvariables
- added 9 new techniques:
VM::NETTITUDE_VM_REGIONSVM::HYPERV_CPUIDVM::CUCKOO_DIRVM::CUCKOO_PIPEVM::USB_DRIVEVM::HYPERV_HOSTNAMEVM::GENERAL_HOSTNAMEVM::SCREEN_RESOLUTIONVM::DEVICE_STRING
- added
VM::HIGH_THRESHOLDnon-technique flag to set a higher threshold score - added optimisations to
VM::detect()andVM::percentage() - added Cuckoo and BlueStacks VM brands
- added heuristic checks for Hyper-V host virtualisation (thanks to @NotRequiem for the suggestion)
- improved memoization system
- renamed
VM::BRANDtechnique toVM::CPU_BRANDto avoid confusion withVM::brand() - fixed wcstomb() deprecation warning
1.5 Release
- added 6 different brands:
KVM Hyper-V EnlightenmentNVMMOpenBSD VMMIntel HAXMUnisys s-ParLockheed Martin LMHS
- added better checks for flag handling
- added C++23 support
- added
VM::DISABLE()function for manually disabling flags - major CLI changes
- added
--brand-listoption which outputs the list of possible VM brands - added
--disable-hyperv-hostoptions which will disregard the possibility of Hyper-V default virtualisation - added number of techniques and number of detected techniques as output
- added
- improved and renewed flag system
- improved discarding mechanism if Hyper-V is detected in case of default virtualisation
- removed
VM::WMICtechnique - deprecated
VM::WIN_HYPERV_DEFAULT, useVM::ENABLE_HYPERV_HOSTinstead
Full Changelog: v1.4...v1.5
1.4 Release
- Added 3 new techniques:
VM::ODD_CPU_THREADS
VM::INTEL_THREAD_MISMATCH
VM::XEON_THREAD_MISMATCH - Added better x86 compatibility for description table techniques (idt)
- Added better caching that's much more efficient now
- Fixed warnings, thanks Requiem :)
- Removed Hyper-V virtualisation (by default unless specified with
VM::WIN_HYPERV_DEFAULTdue to false positives associated with default virtualisation for every program when Hyper-V is enabled)
Full Changelog: v1.3...v1.4
1.3 Release
- added specific VMware products (ESX, GSX, etc...) as potential brands
- added
--conclusionflag to cli to return just the conclusion message - added 12 new techniques
- added "
Microsoft Virtual PC/Hyper-V" as possible brand string - added 32-bit support
- added
VM::MULTIPLEflag for multiple brand outputs - fixed
VM::ALLandVM::DEFAULTflags being private - improved cpuid hypervisor leaf detections
1.2 Release
- added 11 new techniques
- added
VM::WIN_HYPERV_DEFAULTflag to tackle Hyper-V default virtualisation on windows - added ARM support
- fixed false positives for
VM::VM_FILES,VM::CPUID_0X4, and other techniques - fixed memory leaks
- merged the "Sunbelt" and "CWSandbox" VMs as just "CWSandbox"
1.1 Release
- restructured and organised the code better
- added new function
VM::add_custom() - memoization fixes
- CLI bug fixes for MSVC and
--detectflag added - added auxiliary dev tools for the library
- added 2 new MSVC techniques
- added MIT and GPL 3.0 separate code libraries
Official 1.0 Release 🎉
- added better technique storing method with bitsets
- added 8 new techniques
- decluttered the code
- improved memoization mechanisms
- miscellaneous changes
Official alpha release
- major compatibility fixes with C++11, 14, and 17
- added many Windows-specific techniques
- added new
VM::percentage()function - massively improved the CLI with a more "dynamic" result than a boolean true or false answer
- added
Thread Expert,CW SandBox,Comodo,SunBelt, andBochsVM techniques as possible VM brands - added 16 new VM detection techniques
- added memoization improvements
- fixed all MSVC warnings
- added
VM::EXTREMEflag for extremely sensitive VM detection - added other miscellaneous improvements