So this is my README. Please read this. It's important, trust me.
KRNL Hardware Info is an experimental low-level hardware info / research project by a single dev. It is meant to be beginner-friendly, VM-first, and honest about the risks that come with playing around near kernel-level stuff.
Important
ALSO READ THE DOCS FOLDER!! ITS ALSO IMPORTANT! READ EVERY README YOU SEE IN HERE IF YOU DONT KNOW WHAT YOU'RE DOING!
Join the Discord for project updates, discussion, and chaos.
- At a Glance
- What This is / Is Not
- Quick Notes
- Current Status
- Safety Warning
- What is KRNL
- My Notes for Casual Coders Reading This
- My Notes for Veteran Coders
- Planned Features
- Build Status
- Project type: Windows hardware info / low-level research tool
- Core idea: user-mode app + kernel driver
- Current focus: CPUID, driver communication, virtualization artifacts
- Safety model: VM-first, test-signing only, no bypass/stealth loader stuff
- Status: early development, skeleton/docs/build setup are being worked on
--
KRNL is:
- a beginner-friendly Windows driver learning project
- a hardware telemetry / CPUID research tool
- a VM-first experiment for learning low-level Windows internals
KRNL is not:
- a cheat
- a malware project
- a driver-signing bypass tool
- something you should casually run on your daily PC
--
- This program is purposefully very beginner friendly.
- This README is gonna be slightly structured too.
- This is a project by a single dev.
- The code isn't obfuscated at all.
- The goal is learning, hardware telemetry, and VM artifact research. Nothing sneaky.
KRNL Hardware Info is currently a low-level hobby / research project, not a polished finished product.
The current idea is:
- hardware monitoring
- kernel-level driver experiments
- checking virtualization artifacts that a Hypervisor would leave behind
- learning how this stuff connects without pretending it is magically safe
Warning
PLEASE dont use this on your Personal PC.
Id recommend using a simple VM to test everything out since if you play games Anti-Cheats will cry because of unsigned Drivers at a kernel level which i m using here.
Even though ik the Capabilities KRNL has, use a VM.
KRNL is a hardware Monitor running on a Kernel level through a driver.
KRNL's main purpose is to help learn about hardware telemetry and the visible artifacts that virtualization can leave behind.
Ik low-level driver and Hypervisor stuff can get abused if people take it in the wrong direction. That is not what this repo is for.
Even though ik the Capabilities KRNL has PLEASE dont use this on your Personal PC.
Id recommend using a simple VM to test everything out since if you play games Anti-Cheats will cry because of unsigned Drivers at a kernel level which i m using here.
Anyone should read this.
Hey you read all that above so you know the basics.
Why??
Because my driver is very likely to have some kind of security risk hackers can abuse.
This tool isnt for OPSEC maniacs. If you are one improve the driver yourself. This is for people learning how Windows drivers, hardware telemetry, and virtualization artifacts work. THIS IS NOT AN OPSEC TOOL "Mr. Robot"!!
First of all, if you want to find everything out yourself, do it and delete my program. Second of all, KRNL makes it easier to find out info about if a Hypervisor leaves visible artifacts. THIS IS FOR LEARNING AND SECURITY RESEARCH!!
Use this as a Hardware monitor then and if you have one, why did you install KRNL??
No. Do it yourself if your desperate for a (maybe) vulnerable driver thats signed. For this repo, development means local test-signing in a VM, not shipping a magical production driver.
KRNL is open source. Check the code yourself if your that paranoid (tho tbh if your reading this you may be just that kind of person).
Bro just read everything in the Casual coders section and your good.
Nothing fake listed here yet. This section exists so future plans can be added without making the project sound more finished than it is.
This project is still early.
| Component | Status |
|---|---|
| User-mode app | Builds and launches successfully |
| Driver connection | Expected to fail until the driver is built, installed, and started |
| Kernel driver | Build/test-signing workflow still in progress |
What exists right now:
- skeleton app/driver/shared code
- docs explaining the intended direction
- Visual Studio / MSBuild project setup started
- beginner notes for WDK, test-signing, and VM testing
What is still rough:
- build setup may still need local Visual Studio / WDK retargeting
- driver work requires the WDK
- loading the driver requires proper signing or test-signing
- VM testing is strongly recommended
- this is not a finished hardware monitor yet
Roadmap:
- general skeleton is finished
- User-mode app builds and runs successfully.
- Current expected runtime behavior: reports missing
\\.\KrnlHardwareInfountil the driver is built, installed, and started.