140 commits

Author	SHA1	Message	Date
sina	d37352fd7e	fix the error for referencing guest registers twice in both kd and vmx codes	2026-07-19 19:39:33 +02:00
munraimix	7436b35fd0	Fix DRIVER_IRQL_NOT_LESS_OR_EQUAL when reading registers on a manually-halted core ... In Debugger Mode, breaking the debuggee and then reading registers (e.g. the 'r' command) could bugcheck the debuggee with DRIVER_IRQL_NOT_LESS_OR_EQUAL (0xD1) at IRQL 0xff. Root cause: DebuggerCommandReadRegisters() copies GUEST_REGS from DbgState->Regs, but the per-core DbgState->Regs is only populated on the event-triggered halt paths. A core halted via a manual break (DEBUGGER_VMCALL_VM_EXIT_HALT_SYSTEM) or via the NMI broadcast (KdHandleNmi) never had DbgState->Regs set, so it was NULL and the GUEST_REGS memcpy dereferenced address 0. Fix: - Add VmFuncGetGuestRegs(CoreId) returning g_GuestState[CoreId].Regs (the guest GP registers saved on the last vm-exit). - Populate DbgState->Regs from it on the two manual-halt entry points (DEBUGGER_VMCALL_VM_EXIT_HALT_SYSTEM and KdHandleNmi) so register reads on a manually-halted core return the correct values. - Add a defensive NULL check in DebuggerCommandReadRegisters().	2026-07-19 16:53:34 +10:00
sina	5bccbff58b	fix IPT kernel structure based on the new model	2026-07-01 19:44:15 +02:00
jtaw5649	a0973894e8	fix: avoid pool list cursor use after free	2026-06-24 16:45:25 +01:00
Masoud Rahimi Jafari	dabf132d31	Fixed ioctl pt operation size bug	2026-06-14 16:29:26 +02:00
sina	df12e9fd79	Fix adding missing IOCTL for Intel PT	2026-06-10 23:56:36 +02:00
Sina Karvandi	b38b43eef9	Merge branch 'dev' into feat/intel-pt-integration	2026-06-10 23:14:26 +02:00
sina	5e5f277e21	fix race condition error in pool manager	2026-06-09 19:34:58 +02:00
sina	cd52174d82	fix and remove unused VMM callbacks	2026-06-09 15:04:20 +02:00
sina	bb3b09beb9	replace VMM callbacks	2026-06-09 01:37:48 +02:00
sina	aa09f9cde3	check to unload the trace module before unloading vmm	2026-06-06 23:45:18 +02:00
sina	0aedc66ed0	add load and unload hyper trace module	2026-06-06 17:18:14 +02:00
Sina Karvandi	67d8d461bd	Merge pull request #603 from HyperDbg/trace-module ... Trace module	2026-06-06 00:34:16 +02:00
sina	5309211043	Fix pool manager corruption of linked lists	2026-06-06 00:33:21 +02:00
sina	f274e1aaa0	check for pool manager initialization	2026-06-05 20:12:30 +02:00
sina	2cd620b521	move IRP closing to basic IOCTLs	2026-06-05 18:29:00 +02:00
jtaw5649	986ef9f085	fix(debugger): unlink actions before free	2026-06-05 14:59:18 +01:00
Masoud Rahimi Jafari	2dc1a26f1c	Added user app example for pt tracing	2026-06-04 01:55:42 +02:00
sina	adfe5f7d14	uninit VMM and KD separately	2026-06-04 00:55:05 +02:00
sina	b6b8320518	moving pool mananger from hyperhv to hyperkd	2026-06-04 00:06:41 +02:00
sina	0a874d31a9	create multiple IOCTL handlers for different modules	2026-06-02 14:04:47 +02:00
sina	ef2a482c45	refactor doxygen, variables, function names 6	2026-05-31 18:59:52 +02:00
sina	cb5a83096d	load trace module	2026-05-28 20:26:33 +02:00
sina	0a279b5dba	check IOCTL to load VMM module	2026-05-27 20:21:21 +02:00
sina	167931fc01	load the vmm module over IOCTL instead of CreateFile	2026-05-26 19:52:04 +02:00
sina	81f3d9f3d2	export HyperTrace LBR support and capacity function to the VMM and HyperEvade module	2026-05-26 16:41:23 +02:00
sina	5fb797c201	fix output buffer IOCTL checks for WRMSR	2026-05-17 20:18:36 +02:00
sina	1369aa777b	refactor IOCTL codes	2026-05-17 17:07:59 +02:00
sina	10dd66d416	add synchronization functions for DPC routines of Windows	2026-05-08 16:44:42 +02:00
sina	de0c56b466	create platform independent intrinsics functions	2026-05-05 21:25:20 +02:00
sina	09416e7fe1	add lbrdump command and sdk function	2026-05-04 00:29:54 +02:00
sina	aa80cd9d6b	Apply all ARCH Based LBR controls on API level	2026-05-01 20:39:13 +02:00
sina	6f004f1ffd	Add ARCH LBR functions from hypervisor	2026-05-01 18:40:39 +02:00
sina	af50093b9b	apply LBR filters from VMX-root mode	2026-04-27 03:16:41 +02:00
sina	84f0fa0ed4	check for the VMX state independently from function arguments	2026-04-26 12:37:08 +02:00
sina	c6b6a8a3a0	add processor trace command	2026-04-25 22:46:55 +02:00
sina	e359911d60	add base structure for Intel PT	2026-04-25 21:42:17 +02:00
sina	3cbf328fee	Restructure of the hypertrace project	2026-04-25 18:02:48 +02:00
sina	566d38c39a	create dmp function to enable, disable, save, and dump LBR branches	2026-04-24 18:35:15 +02:00
Sina Karvandi	54c2a9923b	Merge pull request #576 from HyperDbg/LBR ... Lbr	2026-04-23 16:44:08 +02:00
sina	24875bda88	apply VM-exit and VM-entry load and save controls from VMCALLs	2026-04-23 16:42:34 +02:00
copilot-swe-agent[bot]	774d61782f	fix: correct typos and one copy-paste error in comments and messages ... Agent-Logs-Url: https://github.com/HyperDbg/HyperDbg/sessions/0817c887-8808-4080-a701-6a0211b10595 Co-authored-by: SinaKarvandi <13383992+SinaKarvandi@users.noreply.github.com>	2026-04-23 12:38:48 +00:00
sina	f2ef1c3f3b	Fix the problem of not applying the EAX index in the CPUID event extension command	2026-04-22 18:24:09 +02:00
sina	f192c194df	initialize the LBR based on hypervisor environment checks	2026-04-22 17:43:23 +02:00
sina	efded3790b	protect load and save vm-entry and vm-exit controls from setting and unsetting in different routines	2026-04-22 16:27:20 +02:00
sina	111bead68d	check for hypervisor support of load and save VMCS exit and entry controls	2026-04-19 20:08:47 +02:00
sina	43cdab9821	broadcast LBR example to all cores	2026-04-19 19:20:18 +02:00
sina	2ad4fa56ee	create separate example for LBR	2026-04-19 15:49:12 +02:00
sina	1b08f14add	add cross VMCALLs for setting core-specific LBR state	2026-04-14 19:23:51 +02:00
sina	a1d30abdf2	remove VMX instructions from hypertrace in favor of linking to hyperhv callbacks	2026-04-14 17:53:54 +02:00