Cool_Tools/KsDumper-11
1
0
Fork 0
mirror of https://github.com/mastercodeon314/KsDumper-11.git synced 2024-11-28 00:10:52 +01:00
Code Releases Activity
A revival of the classic and legendary KsDumper
9 Commits 1 Branch 8 Tags 7.1 MiB
C# 95.2%
C 4.8%
866bc94262
Go to file
Mastercodeon 866bc94262 More spelling
2023-01-21 20:06:14 -06:00
DarkControls Final Release push 2023-01-21 19:59:34 -06:00
KsDumper11 Final Release push 2023-01-21 19:59:34 -06:00
.gitignore Initial commit 2023-01-21 18:38:41 -06:00
KsDumper11.sln Main upload 2023-01-21 19:32:57 -06:00
README.md More spelling 2023-01-21 20:06:14 -06:00

README.md

KsDumper-11

Demo ^New Demo gif comming soon

Features

  • Auto dumping of selected exe.
  • Auto Refresh (every 100ms)
  • Suspend, resume, kill process
  • Dump any process main module using a kernel driver (both x86 and x64)
  • Rebuild PE32/PE64 header and sections
  • Works on protected system processes & processes with stripped handles (anti-cheats)
  • Works on Windows 11, it doesnt crash anymore! Dev Channel Insider Build Win 11 Ksdumper

Note: Import table isn't rebuilt.

Usage

The old way of loading the unsigned ksDumper.sys kernel driver was to use the capcom exploit to map it, this got patched in windows 11. This one loads the driver with Kernel Driver Utility, or KDU for short. I could not get the main fork of the program to work when being built from source.

This one does though. https://github.com/morelli690/KDU_kernel_bypass_/blob/master/Bin/kdu.exe

All driver loading is now automated, i plan on putting in a splash screen till the driver loads. For now, the client wont open until the driver has been loaded, if it fails, it exits. I tried to build a logger to output kdu's console output to a file, however it writes black always. Known issue

Note: The driver stays loaded until you reboot, so if you close KsDumper11.exe, you can just reopen it !
Note2: Even though it can dump both x86 & x64 processes, this has to run on x64 Windows.

Disclaimer

This project has been made available for informational and educational purposes only. The driver source is not included because i couldnt ever get it to compile on my system. The source can be found on the original reop. Considering the nature of this project, it is highly recommended to run it in a Virtual Environment. I am not responsible for any crash or damage that could happen to your system.

Important: This tool makes no attempt at hiding itself. If you target protected games, the anti-cheat might flag this as a cheat and ban you after a while. Use a Virtual Environment !

References

Compile Yourself

  • Requires Visual Studio 2022
  • Requires .NET 4.8