IoAttack

Note

IoSpy and IoAttack are no longer available in the WDK after Windows 10 Version 1703.

As an alternative to these tools, consider using the fuzzing tests available in the HLK. Here are a few to consider.

DF - Fuzz random IOCTL test (Reliability)

DF - Fuzz sub-opens test (Reliability)

DF - Fuzz zero length buffer FSCTL test (Reliability)

DF - Fuzz random FSCTL test (Reliability)

DF - Fuzz Misc API test (Reliability)

You can also use the Kernel synchronization delay fuzzing that is included with Driver Verifier.

The Penetration Tests (Device Fundamentals) test Run I/O Attack performs the fuzz tests. The Run I/O Attack test uses the IoSpy data file that was previously created through IoSpy on a test system.

Before running IoAttack on a test system, you must do the following:

If any of these steps have been performed, you must reboot the test system before you run IoAttack.

For more information about how to run fuzz tests, see How to Perform Fuzz tests with IoSpy and IoAttack.