SSDE is a collection of utilities that help in having Windows load your custom signed kernel drivers when Secure Boot is on and you own the system's platform key, instead of using test mode.
☆277Aug 27, 2021Updated 4 years ago
Alternatives and similar repositories for ssde
Users that are interested in ssde are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Load self-signed drivers without TestSigning or disable DSE. Transferred from https://github.com/DoubleLabyrinth/Windows10-CustomKernelSi…☆799Jan 22, 2020Updated 6 years ago
- This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness☆58Sep 12, 2019Updated 6 years ago
- ☆23May 8, 2023Updated 3 years ago
- x64 PE-COFF virtualization driven obfuscation engine☆58Oct 14, 2022Updated 3 years ago
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆269Aug 31, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- create a um process that contains all physical memory☆20Jun 12, 2026Updated last month
- An x64 page table iterator written in C++ as a kernel mode windows driver.☆123May 25, 2021Updated 5 years ago
- x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration☆409Jul 6, 2022Updated 4 years ago
- A Windows Kernel Driver Emulator base on Unicorn, Kernel Memory Dump and some of native environment☆186Jan 15, 2026Updated 6 months ago
- ☆26Sep 29, 2022Updated 3 years ago
- A wrapper class to hide the original calling address of a function☆54Aug 9, 2020Updated 5 years ago
- ☆26Jul 15, 2023Updated 3 years ago
- Exploit MsIo vulnerable driver☆142Aug 12, 2021Updated 4 years ago
- Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executabl…☆414Jan 29, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Walks through the 4-level paging structures in Windows x64☆14Feb 12, 2023Updated 3 years ago
- KDP compatible unsigned driver loader leveraging a write primitive in one of the IOCTLs of gdrv.sys☆170Jun 14, 2024Updated 2 years ago
- Windows kernel driver that detects hypervisors by probing SIDT/LIDT edge cases, paging/TLB behaviors, privilege transitions, and timing e…☆48Mar 3, 2026Updated 4 months ago
- Disable PatchGuard and Driver Signature Enforcement at boot time☆2,483Jun 16, 2026Updated last month
- Easy Anti PatchGuard☆219Apr 9, 2021Updated 5 years ago
- partially disable patchguard up to win11 21H2☆21Jun 3, 2024Updated 2 years ago
- nmi stackwalking + module verification☆173Dec 28, 2023Updated 2 years ago
- DSE bypass using a leaked cert and adjusting the current clock.☆164Oct 3, 2025Updated 9 months ago
- A packed & protected Module Loader and more, for 64-bit Windows☆29Mar 5, 2021Updated 5 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- windows rootkit☆60May 2, 2024Updated 2 years ago
- Driver demonstrating how to register a DPC to asynchronously wait on an object☆51Jan 15, 2021Updated 5 years ago
- HyperDeceit is the ultimate all-in-one library that emulates Hyper-V for Windows, giving you the ability to intercept and manipulate oper…☆384Jun 3, 2023Updated 3 years ago
- Hook NtDeviceIoControlFile with PatchGuard☆105May 10, 2022Updated 4 years ago
- usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to …☆500Jan 3, 2022Updated 4 years ago
- Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.☆911Nov 21, 2019Updated 6 years ago
- Kernel-Mode extended version of https://github.com/microsoft/Detours☆183Jun 1, 2025Updated last year
- PointerGuard is a proof-of-concept tool used to create 'guarded' pointers which disguise pointer addresses, monitor reads/writes, and pre…☆58May 23, 2022Updated 4 years ago
- An example of Windows NT Native API application and kernel driver☆22Feb 10, 2020Updated 6 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Kernel Driver Utility☆2,656Updated this week
- Hook syscalls from ring0 without triggering PatchGuard☆24Oct 29, 2025Updated 8 months ago
- Static user/kernel mode library that allows access to all functions and global variables by extracting offsets from the PDB☆130May 29, 2025Updated last year
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Nov 22, 2021Updated 4 years ago
- A library to develop kernel level Windows payloads for post HVCI era☆519May 18, 2021Updated 5 years ago
- Windows Kernel API wrapper with simplified functions and enterprise driver extensions.☆37Jul 8, 2025Updated last year
- 这篇文章的目的是介绍一款实验性项目基于COM命名管道或者Windows Hyper-V虚拟机Vmbus通道实现的运行在uefi上的windbg调试引擎开发心得☆42Jun 16, 2024Updated 2 years ago