IntelLabs / kAFL

A fuzzer for full VM kernel/driver targets
https://intellabs.github.io/kAFL/
MIT License
659 stars 92 forks source link

how to debug win10 driver crash? #296

Open liujf628995 opened 2 months ago

liujf628995 commented 2 months ago

I tried the command:kafl debug --action single/gdb, there is no valid information. I have watched the windows driver tutorial,It seems need to get minidump from windows and try to analysis it with winDbg. But when I mount the windows qcow2 to linux filesystem folder /mnt,I did not found mindump in C:\windows.I'm not sure if this is related to restoring snapshots during the testing process. So,is there a simple way to obtain windows crash details, just like testing the Linux kernel with kafl debug, or we can directly obtain the minidump file in the kafl workdir?