Skip to content

0xhido/WindowsKernelDevelopment

Repository files navigation

Windows Kernel Development

This repo has my solutions for exercises specified inside the "Windows Kernel Development" book written by Pavel Yosifovich (which is more than recommended :)).

Full Kernel Debugging Environment

Host Machine

  1. Install VS19

  2. Install Windows SDK

  3. Install Windows Driver Kit

  4. Install WinDbg Preview

  5. Download Sysinternals

  6. Download Spectre Mitigation requirements

  7. Download and create VM (I'm using Hyper-V)

Guest Machine

  1. Run the following commands inside the VM:
bcdedit /debug on
bcdedit /dbgsettings serial debugport:1 baudrate:115200
  1. Restart
  2. Create a COM Port
  3. Check if COM Port created using:
Get-VMComPort <VM_NAME>
  1. Enable test signing (for loading unsigned drivers)
bcdedit /set testsigning on
  1. Restart the machine
  2. Enable kernel logging: 7.1. Open registry key HKLM\SYSTEM\CurrentControlSet\Control\Session Manager 7.2. Create new Key - Debug Print Filter 7.3. Create new DWORD value DEFAULT = 0x8
  3. Restart the machine
  4. Open DbgView.exe and set Capture Kernel using Ctrl+K.

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published