Detect virtualized OS from an application?

by

Have you heard about blue pill, red pill?. It’s a technique used to see if you are running inside a virtual machine or not. The origin of the term stems from the matrix movie where Neo is offered a blue or a red pill (to stay inside the matrix = blue, or to enter the ‘real’ world = red).

The following is some code that will detect wheter you are running inside ‘the matrix’ or not:
(code borrowed from this site which also contains some nice information about the topic at hand):

 int swallow_redpill () {
   unsigned char m[2+4], rpill[] = "\x0f\x01\x0d\x00\x00\x00\x00\xc3";
   *((unsigned*)&rpill[3]) = (unsigned)m;
   ((void(*)())&rpill)();
   return (m[5]>0xd0) ? 1 : 0;
 }

The function will return 1 when you are running inside a virutal machine, and 0 otherwise.

More Related Contents:

  1. Virtualbox “port forward” from Guest to Host [closed]
  2. VT-x is disabled in the BIOS for both all CPU modes (VERR_VMX_MSR_ALL_VMX_DISABLED)
  3. How do I associate a Vagrant project directory with an existing VirtualBox VM?
  4. Can’t install virtualbox in Arch
  5. Boot loader doesn’t jump to kernel code
  6. Virtualizing an ItemsControl?
  7. Vagrant stuck connection timeout retrying
  8. Addressing localhost from a VirtualBox virtual machine [closed]
  9. What are the differences between virtual memory and physical memory?
  10. How to connect to a docker container from outside the host (same network) [Windows]
  11. How to perform keystroke inside powershell?
  12. Intel’s HAXM equivalent for AMD on Windows OS
  13. Cross-browser testing: All major browsers on ONE machine
  14. VT Not Supported when Installing HAXM
  15. Vagrant box could not be found or could not be accessed in the remote catalog – incompatible curl version
  16. Vagrant error : Failed to mount folders in Linux guest
  17. Vagrant up timeout
  18. Git error “fatal: ambiguous argument ‘HEAD’: unknown revision or path not in the working tree”
  19. Failed to open/create the internal network Vagrant on Windows10
  20. GenyMotion Unable to start the Genymotion virtual device
  21. Commit data in a mysql container
  22. Symfony2 Slow Initialization Time
  23. What is the overhead of a context-switch?
  24. How to identify that you’re running under a VM?
  25. How to Dockerize windows application
  26. Just black screen after running Qemu
  27. VBoxManage: error: Failed to create the host-only adapter [closed]
  28. How to increase docker-machine memory Mac
  29. I am getting this error “your cpu doesn’t support vt-x or svm, android studio 2.1.1 in AMD 6300 processor”
  30. What is meant by shared kernel in Docker?

Leave a Comment