Source Code CSGO Kernel Driver Multihack

[geniuz]

Beware that the offsets are untested for anything above 2004. Ensure you do everything as admin.

I compiled and can get it to load nearly, downgraded to 1909. However I get KMODE EXCEPTION? Any solution around this? I can get nbq's kernel source to work with trigger but not this. (manual mapping this and following procedure)

(can get nbq and kernel ESP's to work) but not this?

 

[dretax]

I compiled and can get it to load nearly, downgraded to 1909. However I get KMODE EXCEPTION? Any solution around this? I can get nbq's kernel source to work with trigger but not this. (manual mapping this and following procedure)

(can get nbq and kernel ESP's to work) but not this?

When are you getting a BSOD? Are you mapping the driver? If you are mapping have you modified the source accordingly?
It's easier if you have a crash dump which gives you an offset of the crashpoint. Then you can open up the driver in IDA, zero the addresses, and search for the offets
@mambda taught me of this magnificient way

 

[geniuz]

When are you getting a BSOD? Are you mapping the driver? If you are mapping have you modified the source accordingly?
It's easier if you have a crash dump which gives you an offset of the crashpoint. Then you can open up the driver in IDA, zero the addresses, and search for the offets
@mambda taught me of this magnificient way

C:\Users\Me\Desktop\GarHal_CSGO-master\x64\Release>kdmapper.exe Garhal.sys
[<] Loading vulnerable driver
[-] Failed to register and start service for the vulnerable driver
[-] Failed to load driver iqvw64e.sys


Getting this now :/

 

[dretax]

You didn't launch CMD as admin.

 

[geniuz]

You didn't launch CMD as admin.

Actually I had faceit installed, now I'm getting addresses are 0x0 finding CS:GO :/.

 

[dretax]

*sigh*

It's a mandatory to be able to debug applications atleast on a basic level. Have you followed the kernel tutorials of GH? Either you don't have the driver running, or didn't launch the controller as admin, and It's unable to make IOCTL requests.

 

[melidere]

Thanks for showing us the github project. I went through and had a question, what did you mean by kernel level drawing? From what I see the wallhack for example is using the glowObject, though all the memory accesses are done through kernel.

 

[dretax]

Thanks for showing us the github project. I went through and had a question, what did you mean by kernel level drawing? From what I see the wallhack for example is using the glowObject, though all the memory accesses are done through kernel.

I was interested once making a draw from kernel rather than using imgui later. I never done it because it seemed pointless to me, but deffo interesting.