A script that generates VirtualBox templates to harden Windows VMs against malware detection.
Antivmdetection is a security tool that generates configuration templates for VirtualBox virtual machines to make them harder to detect by malware. It modifies hardware signatures, system artifacts, and Windows registry entries to help virtual machines appear as physical hardware, enabling more effective malware analysis and security research.
Security researchers, malware analysts, and penetration testers who need to run Windows malware in virtualized environments without triggering VM-aware evasion techniques.
It provides a scriptable, version-compatible approach to VM hardening without requiring VirtualBox modifications, offering comprehensive anti-detection measures that go beyond basic virtualization checks.
Script to create templates to use with VirtualBox to make vm detection harder
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Generates both host-side shell scripts and guest-side PowerShell scripts to modify VM settings from multiple angles, ensuring comprehensive anti-detection coverage as outlined in the usage steps.
Spoofs BIOS dates, CPU brand strings, volume IDs, and product IDs using tools like VolumeId.exe and registry edits, addressing key detection vectors highlighted in the version history.
Creates user documents and desktop backgrounds to mimic real systems, going beyond standard VM checks to evade malware that fingerprints installations, as noted in the background section.
Uses existing VirtualBox settings without modifying the core codebase, reducing breakage with new releases, which aligns with the project's philosophy for stability.
Requires installing multiple Linux packages and manually downloading external Windows binaries like VolumeId.zip, adding significant initial overhead and potential for errors.
Involves running scripts twice in the guest, disabling UAC, and ensuring specific VM configurations before installation, making the process time-consuming and prone to user mistakes.
Only works with VirtualBox, excluding users of other virtualization platforms, as the tool relies on VirtualBox-specific settings and scripts.