windows kernel debugging on Mac host (using VirtualBox)

Question

I'm running on MacOS Sierra (version 10.12.4). And I created two virtual machine on Virtualbox (version 5.1.22).

1- Host Machine : Windows 10 Pro x64 (I installed Windows Driver kit 10)

2- Target Machine: Windows 7 Pro x64

Now I'm trying to use the first machine to debug the second one. And I configured the same host pipe for the two machines.

• Configuration for the serial port in the Host machine(also same in the Target machine)

• In the debugger (host) machine, I launches windbg with this settings

• And I enabled debug mode on the debugee (target) machine

C:\Windows\system32>bcdedit/dbgsettings

debugtype Serial

debugport 1

baudrate 115200

But when I trying to connect, they don't seem to know each other.

What's wrong?

Answer 1

1. Start Debugger VM at first.

   WinDbg: com:port=com1,baud=115200
   

2. Start Debuggee VM at second, and Enable Kernel Debug Mode.

   C:\Windows\system32>bcdedit /copy {current} /d "Windows Kernel Exploitation"   
   .... {bee4606e-51f1-11e8-97a8-decf25840cbf}
   
   C:\Windows\system32>bcdedit /debug {bee4606e-51f1-11e8-97a8-decf25840cbf} on   
   
   C:\Windows\system32>bcdedit /dbgsettings  
   debugtype               Serial   
   debugport               1  
   baudrate                115200
   

---

Debuggee

Debugger