search

0mWindyBug / KDP-compatible-driver-loader

KDP compatible unsigned driver loader leveraging a write primitive in one of the IOCTLs of gdrv.sys
128 stars 27 forks source link

Crash due to wrong ntoskrnl module size. #4

Closed rafaelscheel closed 7 months ago

rafaelscheel commented 7 months ago

The size of ntoskrnl.exe in getCiValidateImageHeaderEntry of load.cpp is hard set to 0x1000000.

This leads to a crash on windows servers, as the code tries to read not initialized memory.

I will provide a fix today in forked repo and create the pull request.