bsod-trigger-bsod's Introduction

Trigger-BSOD

⚠️ ONLY FOR COMPUTER SECURITY. DO NOT USE THIS REPO FOR ILLEGAL PURPOSES. ⚠️

NtRaiseHardError & ZwRaiseHardError

Both functions are undocumented Windows APIs (NTAPI) included in ntdll.dll, can cause BlueScreen (BSOD, Blue Screen of Death) with certain parameters.

Does not triger UAC (User Account Control). Works on Windows systems with Windows NT kernel, tested on Windows 7 and Windows 10.

NtRaiseHardError

NtRaiseHardError(
  IN  NTSTATUS                  ErrorStatus,
  IN  ULONG                     NumberOfParameters,
  IN  PUNICODE_STRING           UnicodeStringParameterMask OPTIONAL,
  IN  PVOID                     *Parameters,
  IN  HARDERROR_RESPONSE_OPTION ResponseOption,
  OUT PHARDERROR_RESPONSE       Response
);

ZwRaiseHardError

ZwRaiseHardError(
  IN  NTSTATUS                  ErrorStatus,
  IN  ULONG                     NumberOfParameters,
  IN  PUNICODE_STRING           UnicodeStringParameterMask OPTIONAL,
  IN  PVOID                     *Parameters,
  IN  HARDERROR_RESPONSE_OPTION ResponseOption,
  OUT PHARDERROR_RESPONSE       Response
);

Parameters

PUNICODE_STRING

#include <SubAuth.h>

typedef struct _UNICODE_STRING {
	USHORT Length;
	USHORT MaximumLength;
	PWSTR Buffer;
} UNICODE_STRING, *PUNICODE_STRING;

HARDERROR_RESPONSE_OPTION

typedef enum _HARDERROR_RESPONSE_OPTION {
	OptionAbortRetryIgnore,
	OptionOk,
	OptionOkCancel,
	OptionRetryCancel,
	OptionYesNo,
	OptionYesNoCancel,
	OptionShutdownSystem
} HARDERROR_RESPONSE_OPTION, *PHARDERROR_RESPONSE_OPTION;

PHARDERROR_RESPONSE

typedef enum _HARDERROR_RESPONSE {
	ResponseReturnToCaller,
	ResponseNotHandled,
	ResponseAbort,
	ResponseCancel,
	ResponseIgnore,
	ResponseNo,
	ResponseOk,
	ResponseRetry,
	ResponseYes
} HARDERROR_RESPONSE, *PHARDERROR_RESPONSE;