Alternatives and similar repositories for PatchBoot

Users that are interested in PatchBoot are comparing it to the libraries listed below

• SamuelTulach / SecureFakePkg
  Simple EFI runtime driver that hooks GetVariable function and returns data expected by Windows to make it think that it's running with se…
  ☆215Updated 4 years ago
• ekknod / smm
  alternative smm driver for ryzen motherboards
  ☆182Updated last year
• SamuelTulach / tpm-spoofer
  Simple proof of concept kernel mode driver hooking tpm.sys dispatch to randomize any public key reads
  ☆230Updated 2 years ago
• Oliver-1-1 / SmmInfect
  ☆260Updated 4 months ago
• backengineering / Voyager
  A Hyper-V Hacking Framework For Windows 10 x64 (AMD & Intel)
  ☆123Updated 2 years ago
• ekknod / sumap
  manually map driver for a signed driver memory space
  ☆167Updated 4 years ago
• SamuelTulach / PwnedBoot
  Using Windows' own bootloader as a shim to bypass Secure Boot
  ☆211Updated last year
• emlinhax / dse_hook
  load unsigned kernel-driver by patching dse in 248 lines
  ☆137Updated last year
• DErDYAST1R / 64KernelDriverCleaner
  A Kernel Driver that can be used for a cheat or malware base to circumvent common cache & structure table checks. PsLoadedModuleList howe…
  ☆192Updated 3 months ago
• 0mWindyBug / KDP-compatible-driver-loader
  KDP compatible unsigned driver loader leveraging a write primitive in one of the IOCTLs of gdrv.sys
  ☆161Updated last year
• jonomango / nohv
  Kernel driver for detecting Intel VT-x hypervisors.
  ☆192Updated 2 years ago
• ReFo0 / hwidinfo
  Hardware ID
  ☆61Updated 3 years ago
• DErDYAST1R / EfiGuardUsermodeLoader
  This is an EfiGuard BootLoader that can boot EfiGuard from Usermode with no USB or Setup as a Single Executable with automatic File Dumpi…
  ☆67Updated 3 months ago
• synctop / tpm-mmio
  Using MMIO (Memory-Mapped I/O) to read TPM 2.0 public Endorsement Key.
  ☆50Updated last year
• Oliver-1-1 / ModuleSpoof
  ☆83Updated last year
• SamuelTulach / HookGuard
  Hooking Windows' exception dispatcher to protect process's PML4
  ☆215Updated 11 months ago
• Flerov / TS-Changer
  TS-Changer - Forces the machine in/out of TestSigning Mode at runtime.
  ☆66Updated 2 years ago
• Deputation / hygieia
  Hygieia, a vulnerable driver traces scanner written in C++ as an x64 Windows kernel driver.
  ☆148Updated 3 years ago
• mrexodia / driver_unpacking
  Ghetto user mode emulation of Windows kernel drivers.
  ☆154Updated last year
• kkent030315 / anymapper
  x64 Windows kernel driver mapper, inject unsigned driver using anycall
  ☆187Updated last year
• SamuelTulach / rainbow
  Hide SMBIOS/disk/NIC serials from EFI bootkit
  ☆318Updated 4 years ago
• sariaki / amd-hypervisor
  a minimalistic windows hypervisor for amd processors
  ☆132Updated 3 years ago
• SamuelTulach / meme-rw
  Archive R/W into any protected process by changing the value of KTHREAD->PreviousMode
  ☆163Updated 3 years ago
• rogerxiii / kernel-codecave-poc
  Proof of concept on how to bypass some limitations of a manual mapped driver
  ☆172Updated 5 years ago
• DErDYAST1R / EACBypass-CR3ReadyDrv
  This is my EAC Bypass (Setup) Driver that offers an undetected communication and callback handler/hooking system through IOCTL.
  ☆154Updated 3 months ago
• 3a1 / Elysium
  UEFI Bootkit Framework that attacks boot-time Code Integrity
  ☆102Updated 3 weeks ago
• Sentient111 / KernelDrawing
  Drawing from kernelmode without any hooks
  ☆173Updated 3 years ago
• xsh3llsh0ck / Deadwing
  SMM driver/rootkit for platform memory access with R3 <-> R0 <-> R-2 communication.
  ☆113Updated last year
• SamuelTulach / memhv
  Minimalistic AMD-V/SVM hypervisor with memory introspection capabilities
  ☆356Updated 10 months ago
• SamuelTulach / SecureHack
  Cheat for my own game SecureGame which uses a bootkit to hyperjack Hyper-V in order to access VBS enclave's memory
  ☆97Updated last year