SSDE is a collection of utilities that help in having Windows load your custom signed kernel drivers when Secure Boot is on and you own the system's platform key, instead of using test mode.
☆277Aug 27, 2021Updated 4 years ago
Alternatives and similar repositories for ssde
Users that are interested in ssde are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Load self-signed drivers without TestSigning or disable DSE. Transferred from https://github.com/DoubleLabyrinth/Windows10-CustomKernelSi…☆800Jan 22, 2020Updated 6 years ago
- This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness☆58Sep 12, 2019Updated 6 years ago
- nmi stackwalking + module verification☆172Dec 28, 2023Updated 2 years ago
- ☆23May 8, 2023Updated 3 years ago
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆269Aug 31, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- x64 PE-COFF virtualization driven obfuscation engine☆58Oct 14, 2022Updated 3 years ago
- create a um process that contains all physical memory☆20Jun 12, 2026Updated last month
- An x64 page table iterator written in C++ as a kernel mode windows driver.☆122May 25, 2021Updated 5 years ago
- x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration☆415Jul 6, 2022Updated 4 years ago
- A Windows Kernel Driver Emulator base on Unicorn, Kernel Memory Dump and some of native environment☆186Jan 15, 2026Updated 6 months ago
- ☆26Sep 29, 2022Updated 3 years ago
- A wrapper class to hide the original calling address of a function☆54Aug 9, 2020Updated 6 years ago
- ☆26Jul 15, 2023Updated 3 years ago
- Exploit MsIo vulnerable driver☆142Aug 12, 2021Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executabl…☆417Jan 29, 2022Updated 4 years ago
- KDP compatible unsigned driver loader leveraging a write primitive in one of the IOCTLs of gdrv.sys☆170Jun 14, 2024Updated 2 years ago
- Walks through the 4-level paging structures in Windows x64☆14Feb 12, 2023Updated 3 years ago
- Windows kernel driver that detects hypervisors by probing SIDT/LIDT edge cases, paging/TLB behaviors, privilege transitions, and timing e…☆49Mar 3, 2026Updated 5 months ago
- Simple DLL and client app that work together to hook all the functions in WinHvPlatform.dll in order to provide logging and introspection…☆21Dec 1, 2021Updated 4 years ago
- Disable PatchGuard and Driver Signature Enforcement at boot time☆2,510Jun 16, 2026Updated last month
- Easy Anti PatchGuard☆219Apr 9, 2021Updated 5 years ago
- A packed & protected Module Loader and more, for 64-bit Windows☆29Mar 5, 2021Updated 5 years ago
- A debugger library using VEH.☆76Sep 3, 2024Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- DSE bypass using a leaked cert and adjusting the current clock.☆164Oct 3, 2025Updated 10 months ago
- windows rootkit☆60May 2, 2024Updated 2 years ago
- Driver demonstrating how to register a DPC to asynchronously wait on an object☆51Jan 15, 2021Updated 5 years ago
- HyperDeceit is the ultimate all-in-one library that emulates Hyper-V for Windows, giving you the ability to intercept and manipulate oper…☆385Jun 3, 2023Updated 3 years ago
- Hook NtDeviceIoControlFile with PatchGuard☆104May 10, 2022Updated 4 years ago
- usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to …☆501Jan 3, 2022Updated 4 years ago
- Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.☆914Nov 21, 2019Updated 6 years ago
- Kernel-Mode extended version of https://github.com/microsoft/Detours☆181Jun 1, 2025Updated last year
- Kernel Driver Utility☆2,682Jul 22, 2026Updated 2 weeks ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- An example of Windows NT Native API application and kernel driver☆22Feb 10, 2020Updated 6 years ago
- Hook syscalls from ring0 without triggering PatchGuard☆26Oct 29, 2025Updated 9 months ago
- PointerGuard is a proof-of-concept tool used to create 'guarded' pointers which disguise pointer addresses, monitor reads/writes, and pre…☆58May 23, 2022Updated 4 years ago
- Static user/kernel mode library that allows access to all functions and global variables by extracting offsets from the PDB☆133May 29, 2025Updated last year
- A library to develop kernel level Windows payloads for post HVCI era☆525May 18, 2021Updated 5 years ago
- 这篇文章的目的是介绍一款实验性项目基于COM命名管道或者Windows Hyper-V虚拟机Vmbus通道实现的运行在uefi上的windbg调试引擎开发心得☆42Jun 16, 2024Updated 2 years ago
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆245Nov 6, 2019Updated 6 years ago