This is an EfiGuard BootLoader that can boot EfiGuard from Usermode with no USB or Setup as a Single Executable with automatic File Dumping using Bytes.
☆83Apr 23, 2026Updated 6 months ago
Alternatives and similar repositories for EfiGuardUsermodeLoader
Users that are interested in EfiGuardUsermodeLoader are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Allows for same-file KernelMode function execution using Encrypted addresses of Functions☆55Apr 23, 2026Updated 6 months ago
- A Kernel Driver that can be used for a cheat or malware base to circumvent common cache & structure table checks. PsLoadedModuleList howe…☆226Apr 23, 2026Updated 6 months ago
- Kernel Level NMI Callback Blocker☆204Apr 23, 2026Updated 6 months ago
- WinAPI Hooking tool that can dump data written to processes or to files through IO.☆26Aug 24, 2024Updated 2 years ago
- This is similar to GdrvLoader but it works on EAC (& BE but same for GdrvLoader) with included gdrv.sys (cert)☆36Apr 23, 2026Updated 6 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Undetected Easy (UDE) is a detection scanner for finding detections before they catch you, using reversed routines from EasyAntiCheat, Ba…☆51Jun 26, 2026Updated 4 months ago
- This is a repo of my previous BEKernelDriver but updated to add better protections and a more detailed setup. also with a good bit of cod…☆172Apr 23, 2026Updated 6 months ago
- The sequel to Voyager☆117Aug 21, 2024Updated 2 years ago
- cr3 shuffle driver☆100Mar 24, 2024Updated 2 years ago
- nmi stackwalking + module verification☆186Dec 28, 2023Updated 2 years ago
- just proof of concept. hooking MmCopyMemory PG safe.☆100Nov 13, 2023Updated 2 years ago
- My EAC & BE Rady CR3 Reading & Writing source that I use for my KM Drivers.☆135Jul 3, 2026Updated 3 months ago
- PoC kernel to usermode injection☆142Feb 26, 2024Updated 2 years ago
- manually map driver for a signed driver memory space☆181Mar 11, 2021Updated 5 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration☆427Jul 6, 2022Updated 4 years ago
- Patches DSE by swapping both data ptrs located in SeValidateImageHeader && SeValidateImageData☆26Feb 9, 2024Updated 2 years ago
- Unknowncheats Magically Optimized Tidy Mapper using nvaudio☆169Jun 11, 2024Updated 2 years ago
- Minimalistic AMD-V/SVM hypervisor with memory introspection capabilities☆441Feb 26, 2025Updated last year
- This is my EAC Bypass (Setup) Driver that offers an undetected communication and callback handler/hooking system through IOCTL.☆246Jul 3, 2026Updated 3 months ago
- My personal / private P2C Project undetected for 8- Months Straight leaked & resold so I am publishing it to piss them off.☆76Apr 23, 2026Updated 6 months ago
- intel vt-x type 2 hypervisor☆69Apr 13, 2025Updated last year
- IoCreateDriver Implementation, it can be useful if you're trying to bypass anticheats☆163Sep 25, 2026Updated last month
- base for testing☆201Sep 28, 2024Updated 2 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- ntoskrnl .data hooks for UM-KM communication☆52May 26, 2024Updated 2 years ago
- Shared Memory Driver for EAC (Specifically for RUST, Tested)☆34Apr 23, 2026Updated 6 months ago
- Hyperspace is a multi-purpose tool for Emulating, Injecting, Dumping and Externals.☆99Jun 10, 2026Updated 4 months ago
- A Dataptr Com Injector made for personal use in combination with Code Virtualizor/LLVM for personal use.☆19Apr 23, 2026Updated 6 months ago
- A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy☆106Jun 26, 2023Updated 3 years ago
- Standard Kernel Library for Windows manipulation in C++☆223Jun 18, 2025Updated last year
- usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to …☆506Jan 3, 2022Updated 4 years ago
- Delta Force Usermode & SDK With Decryption as of 12.17.2025☆17Dec 17, 2025Updated 10 months ago
- A mapper that maps shellcode into loaded large page drivers☆374Apr 26, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆300Sep 2, 2025Updated last year
- A simple UM + KM example of how to bypass EAC CR3☆219Oct 13, 2025Updated last year
- Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.☆423Aug 8, 2021Updated 5 years ago
- User mode C++ tool for detecting UEFI drivers, bootkit malware and modifications by checking the Windows bootloader and managing BCD☆13Sep 6, 2024Updated 2 years ago
- x64 Windows kernel driver mapper, inject unsigned driver using anycall☆232Feb 14, 2024Updated 2 years ago
- Shows an example of how to implement VT-d/AMD-Vi on Windows☆189Sep 22, 2023Updated 3 years ago
- Windows kernel driver demonstrating kernel-to-usermode communication via shared memory sections☆126Apr 24, 2026Updated 6 months ago