Use PKfail to install UEFI Bootkits
☆24Aug 16, 2026Updated 2 weeks ago
Alternatives and similar repositories for PKfail
Users that are interested in PKfail are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Automated environment setup for Bootkit & Rootkit development.☆45Aug 16, 2026Updated 2 weeks ago
- Windows Kernel Rootkit☆76Aug 16, 2026Updated 2 weeks ago
- Starter pack for learning how to develop UEFI bootkits: basic proof-of-concepts, development environment configuration, and step-by-step …☆32Jul 31, 2026Updated 3 weeks ago
- Starter pack for learning how to develop Kernel-Mode rootkits: basic proof-of-concepts, development environment configuration, and step-b…☆25Jul 31, 2026Updated 3 weeks ago
- A curated compilation of extensive resources dedicated to bootkit and rootkit development.☆264Aug 16, 2026Updated 2 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- The first publicly shared complete Windows UEFI bootkit framework for automated Ring0 rootkit deployment and APT emulation☆164Aug 16, 2026Updated 2 weeks ago
- Anti-Rootkit Tool for Windows☆15Mar 24, 2025Updated last year
- Small driver that uses alternative syscalls feature☆17May 9, 2024Updated 2 years ago
- POC about how to detect windows kernel debug by pool tag.☆13Nov 29, 2023Updated 2 years ago
- A C++ syscall ID extractor for Windows. Developed, debugged and tested on 20H2.☆22May 25, 2021Updated 5 years ago
- Proof-of-Concept exploit for CVE-2026-32223☆21Apr 17, 2026Updated 4 months ago
- Simple DLL and client app that work together to hook all the functions in WinHvPlatform.dll in order to provide logging and introspection…☆20Dec 1, 2021Updated 4 years ago
- Basic utilities for executing, reading and writing 64-bit data in a 32-bit WoW64 process☆19Jul 8, 2022Updated 4 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆22Nov 22, 2021Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Advanced native-mode utility for bypassing DSE and HVCI. Implements smart SeCiCallbacks patching and independent management of Memory Int…☆67Apr 28, 2026Updated 4 months ago
- Source code on the 1.44MB 3.5 floppy accompanying the Windows NT File System Internals book.☆19Jul 31, 2019Updated 7 years ago
- ☆23Jan 15, 2025Updated last year
- 🚫🐦 Decrypt Warbird segments.☆16Nov 28, 2025Updated 9 months ago
- A minimal CR3 protection PoC (KdpTrap hook)☆18Jan 25, 2025Updated last year
- Elevate arbitrary MSR writes to kernel execution.☆54Sep 3, 2023Updated 2 years ago
- Simple single file header for creating zero imports drivers. Can be useful for bypassing forensic memory analysis performed by anticheats…☆25May 20, 2026Updated 3 months ago
- Intraceptor intercept Windows NT API calls and redirect them to a kernel driver to bypass process/threads handle protections.☆28May 18, 2022Updated 4 years ago
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆69Oct 19, 2024Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ☆15Jan 9, 2023Updated 3 years ago
- Another UEFI runtime bootkit☆35May 8, 2023Updated 3 years ago
- An example code of CiGetCertPublisherName☆15Mar 24, 2022Updated 4 years ago
- stack based arithmetic only virtual machine (VM) executes bytecode instructions to perform various basic arithmetic operations and manage…☆28Mar 19, 2025Updated last year
- Cracking MBAs☆56Jul 31, 2026Updated 3 weeks ago
- CVE-2026-46242☆19Jul 4, 2026Updated last month
- ☆37Nov 8, 2024Updated last year
- .NET Code Virtualization with cool features. Once intended to sell. Rip VirtualGuard.io☆16Feb 8, 2026Updated 6 months ago
- Implementation of KlezVirus' silent moonwalk approach for payloads☆18Feb 13, 2026Updated 6 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- From 2011: Quickly search for files in NTFS volumes parsing the Master File Table (MFT). A decent amount of how NTFS and MFT work was pai…☆28Oct 14, 2019Updated 6 years ago
- ☆21Jun 3, 2021Updated 5 years ago
- Autonomous Windows POC developer from patchwatch diff reports☆66Jul 30, 2026Updated last month
- Basic experimentation with Windows drivers.☆19Mar 3, 2023Updated 3 years ago
- My notes about the stub.dll obfuscator.☆38Dec 12, 2025Updated 8 months ago
- ☆18Mar 28, 2023Updated 3 years ago
- llvm powered deobfuscation of a vm-based protection☆62Feb 25, 2026Updated 6 months ago