search

hfiref0x / VBoxHardenedLoader

VirtualBox VM detection mitigation loader
BSD 2-Clause "Simplified" License
919 stars 275 forks source link

spoof video adapter #13

Closed mo1t3n closed 7 years ago

mo1t3n commented 7 years ago

Hi! How i can spoof video card/adapter in VirtualBox?

hfiref0x commented 7 years ago

It is already spoofed by this patch to report itself as nvidia manufactured device. Windows will use generic video driver for it. No other options exist.

mo1t3n commented 7 years ago

That is, I can not replace the video card in the virtualbox with your project? For example, I have an Intel HD Graphics 2000 video card in my computer, and I want the Intel HD Graphics 3000 to be displayed in the virtual box. I can replace the processor with your project like this: % Vboxman% setextradata "% n1%" VBoxInternal / CPUM / HostCPUID / 80000002 / eax 0x20202020 % Vboxman% setextradata "% n1%" VBoxInternal / CPUM / HostCPUID / 80000002 / ebx 0x20202020 % Vboxman% setextradata "% n1%" VBoxInternal / CPUM / HostCPUID / 80000002 / ecx 0x20202020 % Vboxman% setextradata "% n1%" VBoxInternal / CPUM / HostCPUID / 80000002 / edx 0x20202020 % Vboxman% setextradata "% n1%" VBoxInternal / CPUM / HostCPUID / 80000003 / eax 0x47202020 % Vboxman% setextradata% n1% VBoxInternal / CPUM / HostCPUID / 80000003 / ebx 0x69756E65 % Vboxman% setextradata "% n1%" VBoxInternal / CPUM / HostCPUID / 80000003 / ecx 0x4920656E % Vboxman% setextradata "% n1%" VBoxInternal / CPUM / HostCPUID / 80000003 / edx 0x6C65746E % Vboxman% setextradata "% n1%" VBoxInternal / CPUM / HostCPUID / 80000004 / eax 0x20295228 % Vboxman% setextradata "% n1%" VBoxInternal / CPUM / HostCPUID / 80000004 / ebx 0x20555043 % Vboxman% setextradata "% n1%" VBoxInternal / CPUM / HostCPUID / 80000004 / ecx 0x36342E33 % Vboxman% setextradata "% n1%" VBoxInternal / CPUM / HostCPUID / 80000004 / edx 0x007A4847

But how do I replace the data on the video card in the same way?

hfiref0x commented 7 years ago

It is a virtual device. VirtualBox cannot magically make it random video card. Even if it can his will be a perfect vm detection event. Just because your "faked" video card won't have any features of real video card. But you can fake hardware/vendor id, this is requires multiple binary patching including patch of efi vga dxe. VBox video hardware code based on Cirrus Logic 5430 controller driver code.

mo1t3n commented 7 years ago

I understand that my fake graphics card will not work as if it were a real graphics card, but I do not need it. I just need to replace the video card to bypass the WebGL fingerprint of the antifraud google adwords system. You can help me with this problem and write this patch, as I myself can not do it. I do not know how to programming. =)

hfiref0x commented 7 years ago

This is not an issue of this project. Closed.