/kdmapper

KDMapper is a simple tool that exploits iqvw64e.sys Intel driver to manually map non-signed drivers in memory

Primary LanguageC++MIT LicenseMIT

KDMapper

Original creator https://github.com/z175

Updated and improved by https://github.com/TheCruZ

Tested from Windows 10 1607 to current Windows 10 20H2 ✔️

Update mainly done for UnknownCheats Forum https://www.unknowncheats.me/forum/members/1117395.html

KDMapper is a simple tool that exploits iqvw64e.sys Intel driver to manually map non-signed drivers in memory

Fixups:

Hook "NtQueryInformationAtom" which exists in all windows versions
Fixed unable to load /GS- compiled drivers

Improvements:

Implemented NtLoadDriver and NtUnloadDriver for less traces
Prevent load if \Device\Nal exists (Prevents BSOD)
Automatic clear PiDDBCacheTable
Header section skipped while copying driver to kernel
Automatic clear g_KernelHashBucketList

Requirements:

Set Custom Driver Entry Point
Create a thread and return from driver entry fastest as you can to prevent unexpected calls

Have Fun!!