Skip to content

KDStinker fork, targeting latest intel driver from 2019

Notifications You must be signed in to change notification settings

patrickcjk/kdstinker19

Repository files navigation

kdstinker19

This will dump any driver loaded using intel driver (2019 one)

Why

The intel driver (used with kdmapper) from 2019 is not calling iocreatedevice but iocreatedevicesecure. They manually resolve this function with MmGetSystemRoutineAddress, thus not present in IAT table (kdstinker would then fail).

How

https://githacks.org/Shawick/goodeye - IAT hooks https://githacks.org/Shawick/kdstinker - Idea

This driver will hook MmGetSystemRoutineAddress in order to hook iocreatedevicesecure when intel driver's resolve it, then swap io controls.

About

KDStinker fork, targeting latest intel driver from 2019

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published