Статья Подборка материалов по исследованию уязвимостей в гипервизоре

[Admin]

Подборка материалов по исследованию уязвимостей в гипервизоре​

Virtualization security Generalized deep technical
● https://www.cs.ucr.edu/~heng/pubs/VDF_raid17.pdf
● https://www.ernw.de/download/xenpwn.pdf
● https://www.blackhat.com/docs/eu-16...tual-Device-Fuzzing-Framework-With-AFL-wp.pdf
● https://www.syssec.ruhr-uni-bochum....entlichungen/2020/02/07/Hyper-Cube-NDSS20.pdf
● https://www.troopers.de/downloads/t...ing_hypervisor_through_hardwear_emulation.pdf


Quality reference - system internals & vulndev primitives
● https://www.exploit-db.com/docs/eng...-on-vulnerabilities-of-hypercall-handlers.pdf
● https://census-labs.com/media/straightouttavmware-wp.pdf
● https://www.blackhat.com/docs/eu-17...tudy-Of-Vmware-G2H-Escape-Vulnerabilities.pdf


Frontiers: Hyper-V, ESXi, speculative execution
● https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/index.html
● https://www.usenix.org/system/files/woot19-paper_zhao.pdf
● https://blogs.technet.microsoft.com...anted-to-know-about-sr-iov-in-hyper-v-part-1/
● https://www.blackhat.com/presentati...tation/BH07_Baker_WSV_Hypervisor_Security.pdf (2007!)
● https://github.com/Microsoft/MSRC-Security-Research/blob/master/presentations/2019_02_OffensiveCon/2019_02 - OffensiveCon - Growing Hypervisor 0day with Hyperseed.pdf
● https://blogs.technet.microsoft.com/srd/2019/01/28/fuzzing-para-virtualized-devices-in-hyper-v/
● https://docs.microsoft.com/en-us/archive/blogs/jhoward/hyper-v-generation-2-virtual-machines-part-1
● https://i.blackhat.com/us-18/Thu-Au...per-V-Through-Offensive-Security-Research.pdf


References
● Intel® 64 and IA-32 Architectures Software Developer’s Manual Combined Volumes: 1, 2A, 2B, 2C, 2D, 3A, 3B, 3C, 3D and 4

Intel® 64 and IA-32 Architectures Software Developer Manuals​

These manuals describe the architecture and programming environment of the Intel® 64 and IA-32 architectures.
https://software.intel.com/content/www/us/en/develop/articles/intel-sdm.html● TLFS: Microsoft Hypervisor Top Level Functional Specification

Hypervisor Specification​

Hypervisor Specification
https://docs.microsoft.com/en-us/virtualization/hyper-v-on-windows/reference/tlfs● Hyper-V Architecture

Hyper-v Architecture​

Describes the Hyper-V architecture and its role in virtualization and provides an overview and glossary of the architecture.
https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/architecture● Enhanced Session Mode

​

rfc2165​

Service Location Protocol (RFC )
https://datatracker.ietf.org/doc/html/rfc2165

rfc2608​

Service Location Protocol, Version 2 (RFC )

https://datatracker.ietf.org/doc/html/rfc2608