SkillAgentSearch skills...

AntiVMHardening

Detecting VMs That Don't Support Or Emulate PCIE Passthrough.

Install / Use

/learn @IntelSDM/AntiVMHardening
About this skill

Quality Score

0/100

Supported Platforms

Universal

README

AntiVMHardening

This is a POC of using the display device to detect VMs despite hardening attempts. VMs such as Hyper-V, VirtualBox and VMWare don't have proper pcie passthrough, they may have GPU passthrough but it will not emulate the host device, but rather use the VM's device.<br> QEmu can defeat this with their PCIE passthrough which will pass through a physical GPU, requiring 2 GPUs to work. For basic anti analysis against RDC, General production VMs this works very well unless the attacker wants to implement their own PCIE emulation.

View on GitHub
GitHub Stars4
CategoryCustomer
Updated1mo ago
Forks4

Languages

C++

Security Score

75/100

Audited on Feb 9, 2026

No findings