Disable PatchGuard and Driver Signature Enforcement at boot time

windows kernel security development

Bootkit / Windows Login Password Bypass Tool

Rusty Bootkit - Windows UEFI Bootkit in Rust (Codename: RedLotus)

Rusty Hypervisor - Windows UEFI Blue Pill Type-1 Hypervisor in Rust (Codename: Illusion)

A programmable and rootkit-like Windows remote access tool.

A curated compilation of extensive resources dedicated to bootkit and rootkit development.

UEFI Bootkit with user-mode communication

A boot record parser that identifies known good signatures for MBR, VBR and IPL.

SMM driver/rootkit for platform memory access with R3 <-> R0 <-> R-2 communication.

UEFI Bootkit Framework that attacks boot-time Code Integrity

The sequel to Voyager

CMake template for a basic EFI application/bootkit. This library is header-only, there is no EDK2 runtime!).

Malicious computer worm Stuxnet and drivers

Persistent backdoor for Android devices with unlocked bootloader. Runs as root in unrestricted SELinux context and can hide itself from anything except root

This is an EfiGuard BootLoader that can boot EfiGuard from Usermode with no USB or Setup as a Single Executable with automatic File Dumping using Bytes.

Cryline project - It's a simple test ransomware for Windows OS without stable encryption. Pls use this source code for study purposes only. The author is't responsible for your actions.

Compact MBR Bootkit for Windows

Windows UEFI Bootkit

Enum and Remove Hook in Windows