9176324 / Shark

Turn off PatchGuard in real time for win7 (7600) ~ later
MIT License
986 stars 303 forks source link

Hi. #46

Open ByteWhite1x1 opened 2 years ago

ByteWhite1x1 commented 2 years ago

Hi.

The project compiled just fine in VS2017. Also Rebuild.cmd worked just fine. Tested on Hyper-V VM: Win10 Pro 2004/21H2. The result: https://i.imgur.com/KO6FwKM.png and I don't see any output in DebugView. I just tested also on bare metal (Win10 Pro 21H1).

I tried to load the "Shark.sys" also in normal way but the result was weird unlisted NTSTATUS codes. My tool unsigned driver loads just fine:

00000063 215.78669739 EnumPoolBigPageTable size in bytes 370850272
00000064 215.78669739 Mode: Kernel memory
00000065 237.78872681 \Device\PhysicalMemory Bytes copied: 939167744

I even signed the driver but it's not working for me. Any idea? Thanks anyway for your efforts.

EDIT: It's a manually mapped driver. I guess I will have have to update it for 21H2.