Disable PatchGuard and Driver Signature Enforcement at boot time

windows kernel security development

Bootkit / Windows Login Password Bypass Tool

Rusty Bootkit - Windows UEFI Bootkit in Rust (Codename: RedLotus)

Rusty Hypervisor - Windows UEFI Blue Pill Type-1 Hypervisor in Rust (Codename: Illusion)

A curated compilation of extensive resources dedicated to bootkit and rootkit development.

A programmable and rootkit-like Windows remote access tool.

SMM driver/rootkit for platform memory access with R3 <-> R0 <-> R-2 communication.

UEFI Bootkit with user-mode communication

A boot record parser that identifies known good signatures for MBR, VBR and IPL.

UEFI Bootkit Framework that attacks boot-time Code Integrity

The sequel to Voyager

Malicious computer worm Stuxnet and drivers

CMake template for a basic EFI application/bootkit. This library is header-only, there is no EDK2 runtime!).

Persistent backdoor for Android devices with unlocked bootloader. Runs as root in unrestricted SELinux context and can hide itself from anything except root

This is an EfiGuard BootLoader that can boot EfiGuard from Usermode with no USB or Setup as a Single Executable with automatic File Dumping using Bytes.

Windows UEFI Bootkit

Cryline project - It's a simple test ransomware for Windows OS without stable encryption. Pls use this source code for study purposes only. The author is't responsible for your actions.

Compact MBR Bootkit for Windows

Enum and Remove Hook in Windows