【Windbg】通过网络调试windows内核

环境

windows版本：win10_x64 1901

windbg版本：1.2306.12001.0

HOST

1、windbg软件设置。

点击菜单文件，然后如下图操作。

2、等待连接。

************* Waiting for Debugger Extensions Gallery to Initialize **************

>>>>>>>>>>>>> Waiting for Debugger Extensions Gallery to Initialize completed, duration 0.016 seconds
   ----> Repository : UserExtensions, Enabled: true, Packages count: 0
   ----> Repository : LocalInstalled, Enabled: true, Packages count: 36

Microsoft (R) Windows Debugger Version 10.0.25877.1004 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.

Using NET for debugging
Opened WinSock 2.0
Waiting to reconnect...

TARGET

1、开启调试模式 

bcdedit /debug on

bcdedit /dbgsettings net hostip:10.XX.72.XXX port:50001 key:1.2.3.4

2、TARGET主机重启。

 

3、HOST显示连接成功。

Connected to target 10.XX.73.XX on port 50001 on local IP 10.XX.72.XXX.
You can get the target MAC address by running .kdtargetmac command.
Connected to Windows 10 18362 x64 target at (Tue Aug  8 15:52:28.014 2023 (UTC + 8:00)), ptr64 TRUE
Kernel Debugger connection established.