Script engine in VMX non-root mode
Description of considerations and limitations in using script engine in vmx non-root mode
The current version of HyperDbg's script engine is designed to work on vmx root-mode.
Some commands like !epthook2 are not triggered on vmx root-mode, and these commands operate on vmx non-root mode. Even though it's possible, but from a design perspective, we prefer to keep these commands in vmx non-root mode and won't trigger them in vmx root-mode.
This way, these commands are faster as we won't have a transition (vm-exit and vm-entry).
On the other hand, the script engine is a crucial feature for the debugger, and all of the commands are supposed to support it.
These limitations are primarily originated from the fact that we access registers like @rip, @rsp, @rflags, @cs, @ds, and other segment registers from the vmx root-mode using VMREAD and VMWRITE instructions.
VMREAD and VMWRITE are not supposed to work on vmx non-root mode; thus, if you use a script like:
1
printf("RIP: %llx\n", @rip);
Copied!
You'll end up with BSODs. Still, you can safely use general-purpose registers, conditional statements, etc.
For instance, the following script is okay.
1
printf("RAX: %llx\n", @rax);
Copied!
Please consider these assumptions when you're using the script engine with vmx non-root commands.
In future versions, these limitations will be fixed, and you can use the script engine with vmx non-root commands as well as vmx-root mode commands.
Copy link
Edit on GitHub