Hypervisor Necromancy; Reanimating Kernel Protectors
http://www.phrack.org/papers/emulating_hypervisors_samsung_rkp.html [www.phrack.org]
2020-03-18 03:09
In this (rather long) article we will be investigating methods to emulate proprietary hypervisors under QEMU, which will allow researchers to interact with them in a controlled manner and debug them. Specifically, we will be presenting a minimal framework developed to bootstrap Samsung S8+ proprietary hypervisor as a demonstration, providing details and insights on key concepts on ARM low level development and virtualization extensions for interested readers to create their own frameworks and Actually Compile And Boot them ;). Finally, we will be investigating fuzzing implementations under this setup.
source: solar