Jump to content

[WIP] Windows 7 Extended Kernel


dotexe1337

Recommended Posts

Hello friends, I am currently working on a kernel extending project for Windows 7!

You can find the sources & more information on my GitHub: kernel-extenders/nt61

If you are interested, you can join the Kernel Extenders Discord: https://discord.gg/zEyPwsmPRF

UPDATE 2024 Feb: Prebuilt downloads are now available on the web @ http://www.dotexe.cf/Extended

:)

 

CHANGELOG
2023/08/17 -- Fixed instability bug

2023/09/19 -- Released wintrust.dll patch to allow anticheat games & DRM to work on my extended kernel -- spoofs WinVerifyTrust to always return successful

2023/10/10 -- Released beta version of the 64-bit (System32) Kernel32 version spoofer. Has some minor known bugs, use at your own risk.

2024/01/21 -- Released the first official version of Windows 7 Extended Kernel. No longer uses wrapper technology, should be 100% stable.

2024/01/24 -- Released v2 of the Windows 7 Extended Kernel. Adds SysWOW64 kernel32.dll and extended winhttp.dll for SysWOW64 and System32

2024/01/25 -- Released v2.1 hotfix to fix a crash bug caused by SysWOW64 winhttp.dll

2024/01/25 -- Released v3 of the extended kernel: SysWOW winhttp rebuilt, bcdedit settings, ci.dll, winload.exe and winload.efi for code integrity bypass included, new dll's added: xinput1_4.dll, dplay.dll (SysWOW64 only), api-ms-win-core-libraryloader-l1-2-0.dll, api-ms-win-core-realtime-l1-1-1.dll, api-ms-win-core-winrt-error-l1-1-0.dll, api-ms-win-core-winrt-l1-1-0.dll, api-ms-win-core-winrt-string-l1-1-0.dll, api-ms-win-power-base-l1-1-0.dll, api-ms-win-shcore-scaling-l1-1-1.dll

2024/01/25 -- Released v3.1 hotfix. The only change is that this version fixes the install.bat for users with spaces in their Windows username (spaces were not escaped properly before)

2024/01/28 -- Released v4: Fixed install.bat failing to copy the files when ran from explorer, fixed osver.ini spoofer not working in local application mode on 64-bit, added functions to kernel32: GetSystemWow64Directory2A, GetSystemWow64Directory2W, GetSystemWindowsDirectory2A, GetSystemWindowsDirectory2W, IsWow64Process2

Edited by dotexe1337
Link to comment
Share on other sites


If you are running Windows 7 on a modern-ish laptop that supports 7 (e.g. Skylake, Kabylake, Coffee Lake, and later AMD and Nvidia), and the touchpad isn't working and you can't get its drivers installed, please save the following thread. Hopefully @George King can get the 8.0 I2C driver working under 7! Couple this with the Extended Kernel (if/when the driver is ported) and you'll have a sturdy Windows 7 laptop!

 

Edited by Jakob99
Link to comment
Share on other sites

  • 3 months later...

update - now trying new technique instead of wrappers (since wrappers were unstable)

i will make a dll called dotexe1337.dll which contains all of the functions code, then each dll such as kernel32, winhttp, ntdll, etc will forward to this, keeping the original dll intact

export address table, export name table, export ordinal table, etc will be enlarged to add forwarded functions and rva's adjusted accordingly

image.thumb.png.04e47296ba75f31a7f5f0a53e48ac8ad.png

Link to comment
Share on other sites

i have released the first official version of windows 7 extended kernel in my discord, please message me on discord for an invite link if you would like: dotexe1337

image.png.646b00567094296847ce4be3b5338cf4.png

Link to comment
Share on other sites

On 1/21/2024 at 6:34 PM, dotexe1337 said:

i have released the first official version of windows 7 extended kernel in my discord, please message me on discord for an invite link if you would like: dotexe1337

image.png.646b00567094296847ce4be3b5338cf4.png

PLEASE do not use Discord for software distribution and choose something that is likely to still be up in X years.

Link to comment
Share on other sites

1 minute ago, baluw said:

PLEASE do not use Discord for software distribution and choose something that is likely to still be up in X years.

What's wrong with Discord? :dubbio:

Link to comment
Share on other sites

Just now, mina7601 said:

What's wrong with Discord? :dubbio:

1. Why should I create an account (were I not to have one already?) and join a server purely to download a single .dll when it could simply be hosted somewhere for direct downloading?

2. Why should I trust a platform known for censorship and getting rid of parts of their community they deem problematic in any way?

3. Why should OP host these files on Discord, considering they MIGHT (keyword) fall under copyright law violations depending on what Microsoft feels like waking up tomorrow?

4. And, most importantly, why should I be forced to use a platform which violates my privacy in every single possible way?

Link to comment
Share on other sites

1 hour ago, baluw said:

PLEASE do not use Discord for software distribution and choose something that is likely to still be up in X years.

I am going to make a website to host downloads, documentation, etc soon. Discord has been temporary just to discuss development and such while it was in beta.

Link to comment
Share on other sites

Yes, thats wonderfull, was wondering whats the difference between your kernel and this one: https://github.com/vxiiduu/VxKex

it seams this one does not require any core system files to be patched but is not developed anymore...

 

I also found this: https://github.com/Blaukovitch/API-MS-WIN_XP which is a ported windows 11 apis back to windows 7 and XP

which might be usefull to make programs that for some strange reason require (the strangest is when an updated does that) newer apis that windows 7 lacks

 

 

Link to comment
Share on other sites

  • dotexe1337 changed the title to [WIP] Windows 7 Extended Kernel
  • 2 weeks later...

i did a twitch stream today under "science & technology" working on the exkernel, made some progress. csdversion (service pack) in getversionexw is now fixed, though i have some kinks to work out for 32-bit. after i fix 32-bit i am going to modify getversionexa to exclude IE dll's, which should fix the IE security popup when version spoofing is enabled.

image.png

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...