hfiref0x / VBoxHardenedLoader

VirtualBox VM detection mitigation loader
BSD 2-Clause "Simplified" License
917 stars 278 forks source link
anti-detect c loader virtualbox

VirtualBox Hardened Loader

VirtualBox Hardened VM detection mitigation loader

Note about archivation from 02 Apr 2023.

This project is no longer maintained since mid of 2020. Reasons are multiple:

  1. Authors switched to another virtual environment and no longer need of use this bugged Oracle product.
  2. For years of existence 2014-2020 a little of public contribution were made but a huge amount of PROFIT were made by these who used this loader for purposes this loader wasn't made (including ridiculous re-brands/game cheating etc). We are okay with it if you are contributing to source you are making profit from. None of them did this.

From now on switch to something else or fork and update this loader. The features that need to be updated are:

  1. Since Windows 11 "some update" Microsoft blocked Intel Nal driver which this loader is using to load it own driver (Tsugumi). You will have to replace Intel Nal driver with something that works (for example some provider from https://github.com/hfiref0x/kdu).
  2. VBox ACPI tables, offsets and EFI VGA module patch weren't updated since mid 2020 - you will have to fix it.
  3. VBoxManage scripts need update for the newest VBox changes.

System Requirements

WARNING: This loader is incompatible with any VirtualBox below 6.1.2.

For version below VirtualBox 6.1.6 please use older release of this loader.

More about key changes in loader version 2 you can read here https://swapcontext.blogspot.com/2020/02/vboxhardenedloader-v2.html

Installation and use guide

https://github.com/hfiref0x/VBoxHardenedLoader/blob/master/Binary/howto.md

Build

Project comes with full source code. In order to build from source you need: 1) Microsoft Visual Studio 2019 for loader build. 2) Windows Driver Kit 8.1/10 and later versions for driver build.

Instructions

Project Contents

Tsugumi - monitoring driver, x64

Purpose: patch VirtualBox dlls in runtime.

Zekamashi - application, x64

Purpose: load Tsugumi monitoring driver, stop monitoring. Type loader /? in command line to view built-in help about supported commands and their syntax.

Linux support

https://github.com/hfiref0x/VBoxHardenedLoader/blob/master/Binary/linux.md

Support and donations

VBoxHardenedLoader is Free Software and is made available free of charge. Your donation, which is purely optional, supports project development and maintaining. If you like the software, you can consider donation which you can do anonymously using the following BTC address

Authors

(c) 2014 - 2020 VBoxHardenedLoader Project