IntelLabs / IntelLabs/kAFL

how to debug win10 driver crash?

Open
#296 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Makefile
Stars
814
Forks
109
PR merge metrics
No merged PRs in 30d

Description

I tried the command:kafl debug --action single/gdb, there is no valid information.
I have watched the windows driver tutorial,It seems need to get minidump from windows and try to analysis it with winDbg.
But when I mount the windows qcow2 to linux filesystem folder /mnt,I did not found mindump in C:\windows.I'm not sure if this is related to restoring snapshots during the testing process.
So,is there a simple way to obtain windows crash details, just like testing the Linux kernel with kafl debug, or we can directly obtain the minidump file in the kafl workdir?

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.