search

EquiFox / KsDumper

Dumping processes using the power of kernel space !
MIT License
979 stars 217 forks source link

Driver loading issues fixed for windows 11 (hopefully :) #24

Open mastercodeon314 opened 1 year ago

mastercodeon314 commented 1 year ago

This has been a long running issue ive had with KsDumper, it would always either not load the driver, or bsod my system when i would run it under windows 11. So far ive hod to use KsDumper in a windows 10 vm for anything i needed it for. That is no longer! I have revived the project and found a new driver mapper that works on win 11. I have also automated the driver loading, and updated the UI. Addition feature were added as well.

https://github.com/mastercodeon314/KsDumper-11

EquiFox commented 1 year ago

Awesome !

Thanks for keeping my work alive.

mastercodeon314 commented 1 year ago

Awesome !

Thanks for keeping my work alive.

It's awesome work, deserves to stay alive ! Currently I'm working on a way to bypass a limitation that I found. If you strip the pe headers during runtime and try to dump with it, it can't dump. Even my auto dumper feature is defeated. I have a theory that I can read the pe from disk before hand, and substitute it during the dumping process.

Also for some reason I can't get the driver to build in vs 2022.