windows kernel security development

Disable PatchGuard and Driver Signature Enforcement at boot time

Bootkit / Windows Login Password Bypass Tool

Rusty Bootkit - Windows UEFI Bootkit in Rust (Codename: RedLotus)

A programmable and rootkit-like Windows remote access tool.

Rusty Hypervisor - Windows UEFI Blue Pill Type-1 Hypervisor in Rust (Codename: Illusion)

Malicious computer worm Stuxnet and drivers

UEFI Bootkit with user-mode communication

UEFI Bootkit Framework that attacks boot-time Code Integrity

A boot record parser that identifies known good signatures for MBR, VBR and IPL.

A curated compilation of extensive resources dedicated to bootkit and rootkit development.

LOJAX ROOTKIT (UEFI) +PDF Included[x]

Compact MBR Bootkit for Windows

Cryline project - It's a simple test ransomware for Windows OS without stable encryption. Pls use this source code for study purposes only. The author is't responsible for your actions.

Enum and Remove Hook in Windows

SMM driver/rootkit for platform memory access with R3 <-> R0 <-> R-2 communication.

This is an EfiGuard BootLoader that can boot EfiGuard from Usermode with no USB or Setup as a Single Executable with automatic File Dumping using Bytes.

The sequel to Voyager

CMake template for a basic EFI application/bootkit. This library is header-only, there is no EDK2 runtime!).

Persistent backdoor for Android devices with unlocked bootloader. Runs as root in unrestricted SELinux context and can hide itself from anything except root