Cannot fuzz with win11 vm

[p1nkjelly]

Hi, I want to run kafl on windows 11 vm. But I think there is some problem.
I tried build windows 11 template and provision with sample target binaries (userspace).
It worked first, but when I provision with my own harness, It does not boot up. (On windows 10 vm, my harness works fine.)
And I tried go back to sample target, It does not boot up too. (with windows 11 vm template)
Is there something known issue about this?

[Wenzel]

Hi @p1nkjelly

When you say "It worked first", does that mean make provision_userspace followed kafl fuzz was successful ?
You were able to launch a campaign ?

but when I provision with my own harness, It does not boot up.

So you are able to provision it once with your own binaries, and then it doesn't boot anymore ?
Can you check in what state Windows 11 is ?

[p1nkjelly]

Hi, @Wenzel Thank you for your response.

When you say "It worked first", does that mean make provision_userspace followed kafl fuzz was successful ?
You were able to launch a campaign ?

Yes. With kAFL tutorial harness, but not worked with my own harness. (with windows 11 VM template)

So you are able to provision it once with your own binaries, and then it doesn't boot anymore ?
Can you check in what state Windows 11 is ?

I can provision with my own binaries, but if I run kafl fuzz It just keep stuck in [QEMU-NYX] Booting VM to start fuzzing....

To summarize the situations I've experienced:

1. On a Windows 10 VM, I confirmed that a fuzzing campaign runs normally with my own harness binary.
2. Creating a Windows 11 VM template, I confirmed that a fuzzing campaign runs normally with the kAFL tutorial harness (crash was observed).
3. When I provisioned my own harness binary with Windows 11 VM template (from 2), and tried to run the fuzzing campaign, it got stuck at [QEMU-NYX] Booting VM to start fuzzing....

[p1nkjelly]

@Wenzel
It appears that I made a mistake.

On Windows 11 24H2, there indeed seems to be an issue. Occasionally, the process does not work and gets stuck at [QEMU-NYX] Booting VM to start fuzzing....
On Windows 11 23H2, however, I confirmed that everything works correctly. My earlier assumption was mistaken.

[Wenzel]

@p1nkjelly thanks for your comments.

I think that since 24h2, Windows 11 has stricter requirements to boot (EFI, Secure boot, TPM, etc).
That's why I emphasized on "Can you check in what state Windows 11 is ?"

[0xhadd0ck]

@p1nkjelly Where did you find the windows 11 template?