This presentation and code are meant for education and research purposes only. Do as you please with it, but accept any and all responsibility for your actions. The tools were created specifically to assist in malware reversing and analysis - be careful.
android-unpacker gdb qemu reverse-engineering android unpackerPANDA is an open-source Platform for Architecture-Neutral Dynamic Analysis. It is built upon the QEMU whole system emulator, and so analyses have access to all code executing in the guest and all data. PANDA adds the ability to record and replay executions, enabling iterative, deep, whole system analyses. Further, the replay log files are compact and shareable, allowing for repeatable experiments. A nine billion instruction boot of FreeBSD, e.g., is represented by only a few hundred MB. PANDA leverages QEMU's support of thirteen different CPU architectures to make analyses of those diverse instruction sets possible within the LLVM IR. In this way, PANDA can have a single dynamic taint analysis, for example, that precisely supports many CPUs. PANDA analyses are written in a simple plugin architecture which includes a mechanism to share functionality between plugins, increasing analysis code re-use and simplifying complex analysis development. It is currently being developed in collaboration with MIT Lincoln Laboratory, NYU, and Northeastern University.
reverse-engineering dynamic-analysis qemuOSX-KVM runs El Capitan, macOS Sierra, High Sierra and Mojave on QEMU/KVM. It does not require an existing physical/virtual macOS installation. However it requires internet access during the macOS installation process. Offline macOS installations are also possible with the OSX-KVM project.
emulation qemu-kvm macos-sierra qemu osx kvm macos-installer hackintosh high-sierraSheepdog is a distributed object storage system for volume and container services and manages the disks and nodes intelligently. Sheepdog features ease of use, simplicity of code and can scale out to thousands of nodes. The block level volume abstraction can be attached to QEMU virtual machines and Linux SCSI Target and supports advanced volume management features such as snapshot, cloning, and thin provisioning.
qemu qemu-kvm iscsi iscsi-target blockdevice storage distributed-storage virtualization vmm software-defined-storage sdnThe lightweight Arch Linux based distro that runs upon any Linux distros without root access. JuNest (Jailed User NEST) is a lightweight Arch Linux based distribution that allows to have an isolated GNU/Linux environment inside any generic host GNU/Linux OS and without the need to have root privileges for installing packages.
sandbox arch-linux root-privileges linux-distros linux-os qemu shellWindowsSpyBlocker 🛡 is an application written in Go and delivered as a single executable to block spying and tracking on Windows systems ⛔️. The initial approach of this application is to capture and analyze network traffic 🚦 based on a set of tools. It is open for everyone and if you want to contribute or need help, take a look at the Wiki 📖. For more info, take a look at Wiki.
spy blocker dnscrypt proxifier wireshark qemu sysmon openwrt firewall ncsi hostsfileYou can configure each template to match your requirements by setting the following user variables. You can also use the pre-built boxes hosted on Atlas.
packer vagrant virtualbox vmware qemurunq is a hypervisor-based Docker runtime based on runc to run regular Docker images in a lightweight KVM/Qemu virtual machine. The focus is on solving real problems, not on number of features. runq requires a host kernel >= 4.8 with KVM and VHOST_VSOCK support enabled. The easiest way to build runq and to put all dependencies together is using Docker. For fast development cycles a regular build environment might be more efficient. For this refer to section Developing runq below.
docker runtime qemu oci kvmScaphandre [skafɑ̃dʁ] is a metrology agent dedicated to electrical power consumption metrics. The goal of the project is to permit to any company or individual to measure the power consumption of its tech services and get this data in a convenient form, sending it through any monitoring or data analysis toolchain. Scaphandre means heavy diving suit in 🇫🇷. It comes from the idea that tech related services often don't track their power consumption and thus don't expose it to their clients. Most of the time the reason is a presumed bad ROI. Scaphandre makes, for tech providers and tech users, easier and cheaper to go under the surface to bring back the desired power consumption metrics, take better sustainability focused decisions, and then show the metrics to their clients to allow them to do the same.
energy sustainability tech measure virtual-machine energy-monitor prometheus rust-lang qemu electricity virtual-machines watts energy-consumption electricity-consumption energy-efficiency greenit electricity-meter carbon-footprint wattmeterThe embiggen-disk tool live-resizes a filesystem after first live-resizing any necessary layers below it: an optional LVM LV and PV, and an MBR or GPT partition table. It's only been tested on 64-bit x86 Linux ("amd64"). It should work on other Linux architectures.
vm resize ext4 virtual-machine vms qemu btrfs mbr gpt lvm resize2fsRun one command, get a QEMU or gem5 Buildroot BusyBox virtual machine built from source with several minimal Linux kernel 4.16 module development example tutorials with GDB and KGDB step debugging and minimal educational hardware models. "Tested" in x86, ARM and MIPS guests, Ubuntu 18.04 host. This is the most native setup, and therefore the best one if you are on one of the supported Ubuntu: 16.04 or 18.04.
buildroot linux-kernel qemu gdb kgdb linux-kernel-moduleThe embiggen-disk tool live-resizes a filesystem after first live-resizing any necessary layers below it: an optional LVM LV and PV, and an MBR or GPT partition table. It's only been tested on 64-bit x86 Linux ("amd64"). It should work on other Linux architectures.
gpt mbr resize2fs btrfs resize lvm qemu vms virtual-machine vm ext4go-qemu is a collection of Go packages for interacting with running QEMU instances. Apache 2.0 Licensed. Feel free to join us in #go-qemu on freenode if you'd like to discuss the project.
qemuThe old Linux kernel source version 0.11 and the integrated experiment environment. CS630 Qemu Lab is a related project, it is a friendly learning environment for the X86 assembly course: CS630.
linux-kernel lab docker qemu bochs debugging operating-system-learningThis is a fork of the kAFL kernel fuzzer. It can be used for targets that execute efficiently as Qemu/KVM guests, including BIOS, custom kernels and full-blown Linux VMs. kAFL uses Qemu/KVM and Intel PT to provide fast execution and coverage feedback. This allows to run many x86 FW and OS kernels with any desired toolchain and without major modifications.
security validation research kernel firmware intel kvm qemu fuzzing grimoire redqueenThis is the build code for NextCloudPi.NextCloudPi is a ready to use image for Raspberry Pi.
nextcloud raspbian-image qemuTroglOS is a playful, but working, example of how to create a virtual devboard from components like Qemu, Linux and BusyBox. It can also run on actual HW, currently Raspberry Pi. Use the build framework in TroglOS to test your embedded applications before the actual hardware arrives. Or as a stable reference when said hardware starts acting up -- as it invariably does ... you can even use it as a reference to other embedded Linux build systems. TroglOS is relatively clean and vanilla, the intent is to keep it as close to upstream sources as possible.
qemu dev-board embedded busyboxPacker post-processor plugin to produce Virtual Hard Disk (VHD) files. packer-post-processor-vhd supports converting VirtualBox and QEMU images to VHDs. It can be used as a post-processor for artifacts from both builders.
packer post-processor vhd virtualbox qemuThis is a GPLv3+ implementation of standalone EFI File System drivers, based on the GRUB 2.0 read-only drivers. If QEMU is installed, the Visual Studio solution will set up and test the drivers using QEMU (by also downloading a sample image for each target file system). Note however that VS debugging expects a 64-bit version of QEMU to be installed in C:\Program Files\qemu\ (which you can download here). If that is not the case, you should edit .msvc\debug.vbs accordingly.
driver qemu efi visual-studio grub2 efi-drivers f2fs gcc gnu-efi arm aarch64 ia32 x64 fs edk2 uefi grubThis is (opinionated) OpenRC runscript for QEMU virtual machines. Add CTU’s Gentoo Overlay to your repos.conf or Layman (read howto).
qemu qemu-kvm kvm openrc initscript
We have large collection of open source products. Follow the tags from
Tag Cloud >>
Open source products are scattered around the web. Please provide information
about the open source projects you own / you use.
Add Projects.