SinaKarvandi / Hypervisor-From-Scratch

Source code of a multiple series of tutorials about the hypervisor. Available at: https://rayanfam.com/tutorials
https://rayanfam.com/tutorials
MIT License
2.22k stars 303 forks source link

Unable to open anything after running part8 #23

Open ZWX334 opened 11 months ago

ZWX334 commented 11 months ago

I'm able to successfully run part 8 and everything appears to be working fine until I go to open any application for example firefox never successfully runs and throws an error while the hypervisor is active and the same goes with pretty much everything else but occasionally I'm able to open something simple like the snipping tool so I'm not sure where to go with this?

I tested it on VMWare 17 and on bare metal resulting in the same behavior, and the OS I was testing it on is Windows 11 Pro 23H2 build 22631.2506 (VBS disabled)

Here is the error message that occurs: Screenshot 2023-11-10 081113

EDIT: If my hardware has any relevance here you go: CPU: i9-10900k (Comet Lake) MB: ASUS ROG Z490-E (BIOS/UEFI version 2701)

SinaKarvandi commented 11 months ago

Hi, Can you test it with HyperDbg too? I'm pretty sure that we fixed this issue there, but I don't remember why exactly this happened. Generally, if you want to use a hypervisor, you should use HyperDbg as it's actively under development and maintained.

1442818223 commented 1 week ago

//HiddenHooksTest(); When it is turned on, the screen will be blue. but //SyscallHookTest(); it is turned on,it not. I tested it on Win11.

SinaKarvandi commented 1 week ago

Hi @1442818223 , Hypervisor From Scratch remained untouched for educational purposes. If you want to use a version that is actively maintained, you need to use HyperDbg's VMM module which is similar to Hypervisor From Scratch.

1442818223 commented 1 week ago

你好@1442818223出于教学目的, Hypervisor From Scratch 保持不变。如果要使用积极维护的版本,则需要使用与 Hypervisor From Scratch 类似的 HyperDbg 的 VMM 模块。

Thank you. HiddenHooksTest won't appear blue screen after compiling in DBG mode. What part should I refer to when I want to run HiddenHooksTest in RELEASE mode?

SinaKarvandi commented 1 week ago

There are different EPT hooks, like:

https://docs.hyperdbg.org/commands/extension-commands/epthook https://docs.hyperdbg.org/commands/extension-commands/epthook2 https://docs.hyperdbg.org/commands/extension-commands/monitor https://docs.hyperdbg.org/commands/extension-commands/mode