Unprotect Navbar Version Logo
  • Home
  • Techniques
  • Scan
  • Resources
    • Snippet List
    • Detection Rule List
    • Featured Evasion API List

    • Contributors

    • Scanned Samples
  • Tools
  • About
  • Avatar Login

Search For Content

Clear

Search Result

1 item(s) found so far for this keyword.

bochs CPU oversights evasion

Sandbox Evasion icon
Sandbox Evasion

bochs has multiple oversights in its CPU emulation, which allows us to detect if we're running in a bochs emulator:

bochs may have invalid CPU brands that don't exist.

  • For AMD CPUs, the "p" in "processor" should be in capital, which bochs doesn't implement.
  • AMD CPUs have easter eggs for their K7 and K8 CPUs ("IT'S …
Read more

The #UnprotectProject is brought to you by 🇫🇷 fr0gger_ and 🇫🇷 DarkCoderSc

Terms And Conditions | GDPR

Contribute Now