search

TheCruZ / kdmapper

KDMapper is a simple tool that exploits iqvw64e.sys Intel driver to manually map non-signed drivers in memory
MIT License
1.92k stars 497 forks source link

kdstinker is that still a thing? #124

Closed evo15 closed 8 months ago

evo15 commented 8 months ago

https://www.unknowncheats.me/forum/c-and-c-/424102-kdstinker-dump-drivers-mapped-using-kdmapper.html

People were using this to dump from intel driver. Did you fix that or is that still a thing??

TheCruZ commented 8 months ago

Kdstinker was a tool that hook intel driver IOCTLs, in general is pretty straightforward to bypass, in any case no, kdmapper is not intended to bypass kdstinker

if you don't want to map your driver if kdstinker exists verify that MAJOR from intel driver points to intel driver area or add a extra function to unhook major (since you know correct offset of the dispatch)