目标机中断后无法执行命令

0

[193] 目标机中断后无法执行命令

TerminalServer

asked 2020-08-13 22:11:58 +0800

1 ●2 ●2

vertarget

eXDI Device Kernel Version 0 UP Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Machine Name: Primary image base = 0x0000000000000000 Loaded module list = 0x0000000000000000 System Uptime: not available

edit retag flag offensive close merge delete

add a comment

0

answered 2020-08-14 16:51:03 +0800

henly

1041 ●2 ●10 ●4

updated 2020-08-17 10:07:22 +0800

您好，如果您调试的目标机系统是Ubuntu，请检查一下ndb.ko是否运行，执行查看指令：lsmod | grep ndb; 调试目标Win10，连接之后的信息大概如下： Nano Debugger (NDB) 1.0.282 Starting KD session type=usb3,proto=dcid,ipc=exdi,opt=rsn

Kernel Debugger connection established Found Module Name ntkrnlmp Found KdVersionBlock at 0xfffff80266a2a3b8 Found target VersionBlock at 0xfffff80266a2a3b8 Connected to Windows 10 18362 x64 target at (Mon Aug 17 10:02:18.221 2020 (UTC + 8:00)), ptr64 TRUE Symbol search path is: srv* Executable search path is: Windows 10 Kernel Version 18362 MP (4 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 18362.1.amd64fre.19h1_release.190318-1202 Machine Name: Kernel base = 0xfffff80266600000 PsLoadedModuleList = 0xfffff80266a480f0 Debug session time: Mon Aug 17 10:02:03.648 2020 (UTC + 8:00) System Uptime: 0 days 0:07:48.987 fffff802`80b34332 c3 ret

image description