WinGows kernel backup tool

Problem

Have u ever experienced this:

and didn’t want to launch your favourite tool with admin rights?

Solution

Say no more!

With this tool you can specify needed files via toml config file, or all if needed.

Requirements

• Go

Result

Configuration

1
System32_files_to_dump = [
2
    "ntoskrnl.exe",
3
    "win32k.sys",
4
    "ntdll.dll"
5
]
6

7
# If u want to backup all valid modules from directory, place a single "*"
8
System32Drivers_files_to_dump = [
9
    "*"
10
]
11

12
# Otherwise it logs every copied file
13
Silent = true

Usage

git clone https://github.com/shv187/winGows_kernel_backuper.git
cd winGows_kernel_backuper
# change config.toml to your needs
go run .

TODO

• Rename It
• Restructurize dump layout
• Dump only these files that had changed since the last dump
• [unlikely] Add an option to install it, add it to PATH and dump to some user defined directory instead of relative /dumps for actual QoL