Use PKfail to install UEFI Bootkits
☆24Aug 16, 2026Updated last month
Alternatives and similar repositories for PKfail
Users that are interested in PKfail are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Automated environment setup for Bootkit & Rootkit development.☆45Aug 16, 2026Updated last month
- Windows Kernel Rootkit☆81Aug 16, 2026Updated last month
- Starter pack for learning how to develop UEFI bootkits: basic proof-of-concepts, development environment configuration, and step-by-step …☆35Jul 31, 2026Updated last month
- Starter pack for learning how to develop Kernel-Mode rootkits: basic proof-of-concepts, development environment configuration, and step-b…☆28Jul 31, 2026Updated last month
- A curated compilation of extensive resources dedicated to bootkit and rootkit development.☆279Aug 16, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- The first publicly shared complete Windows UEFI bootkit framework for automated Ring0 rootkit deployment and APT emulation☆167Aug 16, 2026Updated last month
- Anti-Rootkit Tool for Windows☆16Mar 24, 2025Updated last year
- Small driver that uses alternative syscalls feature☆17May 9, 2024Updated 2 years ago
- POC about how to detect windows kernel debug by pool tag.☆13Nov 29, 2023Updated 2 years ago
- A C++ syscall ID extractor for Windows. Developed, debugged and tested on 20H2.☆22May 25, 2021Updated 5 years ago
- Proof-of-Concept exploit for CVE-2026-32223☆21Apr 17, 2026Updated 5 months ago
- Simple DLL and client app that work together to hook all the functions in WinHvPlatform.dll in order to provide logging and introspection…☆21Dec 1, 2021Updated 4 years ago
- Basic utilities for executing, reading and writing 64-bit data in a 32-bit WoW64 process☆20Jul 8, 2022Updated 4 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Nov 22, 2021Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Advanced native-mode utility for bypassing DSE and HVCI. Implements smart SeCiCallbacks patching and independent management of Memory Int…☆70Apr 28, 2026Updated 4 months ago
- Source code on the 1.44MB 3.5 floppy accompanying the Windows NT File System Internals book.☆20Jul 31, 2019Updated 7 years ago
- ☆22Jan 15, 2025Updated last year
- 🚫🐦 Decrypt Warbird segments.☆16Nov 28, 2025Updated 9 months ago
- A minimal CR3 protection PoC (KdpTrap hook)☆19Jan 25, 2025Updated last year
- Simple single file header for creating zero imports drivers. Can be useful for bypassing forensic memory analysis performed by anticheats…☆26May 20, 2026Updated 3 months ago
- Intraceptor intercept Windows NT API calls and redirect them to a kernel driver to bypass process/threads handle protections.☆29May 18, 2022Updated 4 years ago
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆69Oct 19, 2024Updated last year
- ☆17Jan 9, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Another UEFI runtime bootkit☆35May 8, 2023Updated 3 years ago
- Elevate arbitrary MSR writes to kernel execution.☆55Sep 3, 2023Updated 3 years ago
- An example code of CiGetCertPublisherName☆15Mar 24, 2022Updated 4 years ago
- stack based arithmetic only virtual machine (VM) executes bytecode instructions to perform various basic arithmetic operations and manage…☆27Mar 19, 2025Updated last year
- CVE-2026-46242☆20Jul 4, 2026Updated 2 months ago
- ☆37Nov 8, 2024Updated last year
- .NET Code Virtualization with cool features. Once intended to sell. Rip VirtualGuard.io☆16Feb 8, 2026Updated 7 months ago
- Implementation of KlezVirus' silent moonwalk approach for payloads☆18Feb 13, 2026Updated 7 months ago
- From 2011: Quickly search for files in NTFS volumes parsing the Master File Table (MFT). A decent amount of how NTFS and MFT work was pai…☆28Oct 14, 2019Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆21Jun 3, 2021Updated 5 years ago
- Cracking MBAs☆75Updated this week
- Basic experimentation with Windows drivers.☆19Mar 3, 2023Updated 3 years ago
- Autonomous Windows POC developer from patchwatch diff reports☆101Jul 30, 2026Updated last month
- ☆18Mar 28, 2023Updated 3 years ago
- llvm powered deobfuscation of a vm-based protection☆62Feb 25, 2026Updated 6 months ago
- VT Hook☆62May 3, 2026Updated 4 months ago