search

EquiFox / KsDumper

Dumping processes using the power of kernel space !
MIT License
969 stars 215 forks source link

help #17

Open wyscigufa9 opened 2 years ago

wyscigufa9 commented 2 years ago 
    1 file(s) copied.

[SC] CreateService SUCCESS [SC] StartService FAILED 577:

Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Driver loaded, fire up the exploit now then press a key when exploit has been done. If you see any access denied, close this and relaunch the bat as Administrator. DO NOT PRESS ANY KEY UNTIL YOU HAVE FINISHED LAUNCHING THE EXPLOIT Press any key to continue . . . [SC] ControlService FAILED 1062:

The service has not been started.

[SC] DeleteService SUCCESS [SC] OpenService FAILED 1060:

The specified service does not exist as an installed service.

[SC] OpenService FAILED 1060:

The specified service does not exist as an installed service.

Could Not Find C:\Windows\system32\drivers\Capcom.sys Cya Press any key to continue . . .

Glafed commented 2 years ago

just read

krulci commented 2 years ago

After you disable secure boot from your bios, open a CMD as admin and do the following after you run your app:

Microsoft Windows [Version 10.0.19043.1766]
(c) Microsoft Corporation. All rights reserved.

C:\WINDOWS\system32>bcdedit.exe /set nointegritychecks on
The operation completed successfully.

C:\WINDOWS\system32>bcdedit.exe -set loadoptions DISABLE_INTEGRITY_CHECKS
The operation completed successfully.

C:\WINDOWS\system32>bcdedit.exe -set TESTSIGNING ON
The operation completed successfully.

You don't want to just disable driver signature enforcement from startup settings as some apps don't run when this feature is disable. After you have run those command, do the following: run LoadUnsignedDriver.bat as admin run LoadCapcom.bat as admin run KsDumperClient.exe ad admin