kHypervisor is a lightweight bluepill-like nested VMM for Windows, it provides and emulating a basic function of Intel VT-x
kHypervisor is an Open Source light-weighted Hypervisor that's capable for nested virtualization in Windows x64 platform, as an extended work of HyperPlatform
The kHypervisor is completed in lab machines, please test kHypervisor in your VMWare or newly installed machine for best experience.
kHypervisor provide an light-weighted virtulized environment for nesting Guest Hypervisor
2016-10-19
First commit, Supporting nested itself only, and nested software breakpoint exception from Level 2. And the nested-Vmm is able to dispatch this exception to L1 and help L1 to resume to L2.
2016-10-21
Fixed Ring-3 vm-exit emulation error.
2017-01-03
Refactor project, and Finding VMCS12 through VMCS02 by executing vmptrst
2017-01-22
GS Kernel base MSR bug fixed when Emulation VMRESUME/VMLAUNCH
2017-02-05
VPID shared between VMCS0-1 and VMCS0-2, support multi-processor.
2017-02-08
Emulate VMExit behaviour has been slightly Changed. in case of L2 is trapped by L0, and L0 emulate VMExit to L1, this time of VMRESUME will not be restore a Guest CR8 and Guest IRQL, it is until VMRESUME by L1. (L0 helps L1 resume to L2)
2017-05-28
Fixed Nested-CPUID problem, and add Nested-VMCALL.
2017-06-07
Fixed a VMExit buggy , clear the guest eflags, and reserved bit[1] == 1
2017-06-08
Adding a support for Monitor Trap Flags from L2 and perform Nested VMExit
2017-11-21
Added VM-Entry Check Emulation , Bug Fixed
2018-01-19
Added Nest-Msr Access support , plus, a better coding style changes. Add Test in Windows x64 build 16299 RS3.Release
2018-02-05
Added Nested EPT which is running in Windows 7 x64 build 7601 system. (still not test by Windows 10)
2018-03-28
Use lateste version repo of Ddimon as a being nested-target, deleted nested-vmm
2018-03-29
Added Nested EPT monitoring , when the PTE entry OF guest EPT is modified, L0 knows.
2020-03-07
Refactored and testing on DdiMon
2020-06-27
Fixed MSR out of index for reserved MSR (0x40000000 ~ 0x400000FF)
kHypervisor extended HyperPlatform which is created by Satoshi Tanda, it is a Nested-Virtual Machine Monitor, and DdiMon is one of instance of HyperPlatform for test demo in kHypervisor.
Compiled kHypervisor.sys and DdiMon.sys by kHypervisor and NestedHypervisor respectively
We supports a multi-core environment
Enable Testsigning on x64:
bcdedit /set testsigning on
Install DdiMon.sys and kHypervisor.sys by following command:
sc create hostvmm type= kernel binPath= C:\kHypervisor.sys
sc create nestedvmm type= kernel binPath= C:\Ddimon.sys
start a service as following screen capture with its expected output
With a highest stablility, better close nested-EPT or running nested-EPT in a unicore enivronment first.
https://github.com/tandasat/HyperPlatform https://github.com/tandasat/ddimon
This software is released under the MIT License, see LICENSE.