XboxMicro

原文地址http://blogs.360.cn/360safe/2013/09/30/from-bluepill-vmx-to-a-simple-defence-principle/多年没写博客了，就先捡点剩菜剩饭炒炒，没啥营养，同学们可以随便看看。另外就是文笔真心烂，阅读的同学们需要点耐心。这篇博客说说一个安全防护系统完备性上所需的一个小原则：防护系统与被防护对象所用资源的完全隔

VT-X太高端霸气上档次了，实在是看不懂...

1.5 MmCreateMapping if (!NT_SUCCESS (Status = MmCreateMapping (g_PageMapBasePhysicalAddress, (PVOID) PML4_BASE, FALSE))) { DbgPrint ("MmInitManager(): MmCreateMapping() failed to map PML4 page,

二、Hvm过程2.1 newbp.c (116)

2.2 HvmNTSTATUS NTAPI HvmSwallowBluepill (){ CCHAR cProcessorNumber; NTSTATUS Status, CallbackStatus; _KdPrint (("HvmSwallowBluepill(): Going to subvert %d processor%s\n", KeNu