Usermode Kernel Communication
Simple communication between usermode and kernel.
How to run
- Install and setup a virtual machine, for example: VMware
- Enable
Virtualize Intel VT-x/EPT or AMD-V/RVI
- If your driver is not signed, you should enable test mode:
bcdedit /set testsigning on
- Use OSR Loader to load the kernel driver
- Open the usermode application and that's it
How to debug
You can use DbgView or WinDbg. The advantage of WinDbg is that you know where it crashes.
If you decide to use WinDbg, follow the following steps: https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/setting-up-a-network-debugging-connection
DbgView
In case you want to use DbgView:
- Create the following registry key:
Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Debug Print Filter
- Add a new DWORD value
DEFAULT
and set its Data field to0xF
- Open DbgView and enable
Capture Kernel
andPass-Through
under Capture - Restart DbgView
- Done