Advanced native-mode utility for bypassing DSE and HVCI. Implements smart SeCiCallbacks patching and independent management of Memory Integrity settings. Operating as a subsystem:native app, it ensures early-phase control and environment preparation for security research and driver development.
☆58Apr 28, 2026Updated 2 months ago
Alternatives and similar repositories for BootBypass
Users that are interested in BootBypass are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆18Jan 11, 2026Updated 6 months ago
- Using the peculiar behaviour of the VPGATHER instructions to determine if an address will fault before it is truly accessed. All done in …☆58Dec 30, 2025Updated 6 months ago
- ☆37Nov 8, 2024Updated last year
- POC about how to detect windows kernel debug by pool tag.☆13Nov 29, 2023Updated 2 years ago
- Hyperspace is a multi-purpose tool for Emulating, Injecting, Dumping and Externals.☆55Jun 10, 2026Updated last month
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆64Oct 19, 2024Updated last year
- ☆16May 2, 2024Updated 2 years ago
- KVC enables unsigned driver loading via DSE bypass (g_CiOptions patch, skci.dll hijack, SeCiCallbacks redirection) and PP/PPL manipulatio…☆294May 28, 2026Updated last month
- A work-in-progress C++20/23 header-only maths library for game development, embedded, kernel and general-purpose that works in constant c…☆25Dec 6, 2022Updated 3 years ago
- The world's smallest TrustedInstaller launcher ~30KB of pure x64/x86 assembly. Hybrid CLI/GUI in one binary. Full NT privilege elevation …☆50Updated this week
- This is an EfiGuard BootLoader that can boot EfiGuard from Usermode with no USB or Setup as a Single Executable with automatic File Dumpi…☆78Apr 23, 2026Updated 2 months ago
- Windows watermark remover using IAT hooking and COM CLSID proxy injection. Patches shell32.dll via TrustedInstaller to intercept ExtTextO…☆50May 26, 2026Updated last month
- out-of-tree LLVM 21+ pass plugin for policy-driven IR obfuscation.☆91Updated this week
- Stealth-focused Intel VT-x hypervisor (EAC/BE/ACs/AVs).☆373Mar 20, 2026Updated 3 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- x64 PE bin2bin obfuscator which doesn't add a section to the binary☆285Updated this week
- Windows 11 kernel research framework demonstrating DSE bypass on Windows 11 25H2 through boot-time execution. Loads unsigned drivers by s…☆247Apr 9, 2026Updated 3 months ago
- Win32 PE Anti-RE and Anti-debugging Framework☆13May 14, 2019Updated 7 years ago
- Morok is a modular C++23 LLVM New-PM IR obfuscator. It loads as a pass plugin inside clang or opt, rewrites LLVM IR, and emits a behavior…☆59Updated this week
- Small driver that uses alternative syscalls feature☆17May 9, 2024Updated 2 years ago
- A basic implementation of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.☆78Mar 29, 2025Updated last year
- Find out how to bypass HVCI (or not). My own research on Microsoft Warbird (specifically in clipsp.sys)☆97Oct 26, 2025Updated 8 months ago
- Cracking MBAs☆52Apr 16, 2026Updated 2 months ago
- Clean Indirect Syscalls with Hook Evasion & Return Address Spoofing.☆97Apr 30, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆57Apr 6, 2026Updated 3 months ago
- ☆18Apr 26, 2026Updated 2 months ago
- .data ptr swapper for newer win32k versions. (Supports Windows 11)☆37Jan 19, 2026Updated 5 months ago
- ☆17Apr 10, 2025Updated last year
- Detecting window hijacking via ETW and GDI table scanning☆25Apr 11, 2026Updated 3 months ago
- reverse engineering of the windows nt kernel debugger protocol & reimplementation.☆36Jul 2, 2024Updated 2 years ago
- Bring your own Unwind Data Framework☆156Mar 15, 2026Updated 4 months ago
- Simple template for using Remill on Windows/Linux/macos.☆35May 22, 2026Updated last month
- ☆26Apr 17, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- POC for CVE-2023-29360☆10Aug 31, 2024Updated last year
- Themida Devirt Results☆96May 10, 2026Updated 2 months ago
- ☆58Jun 10, 2026Updated last month
- A Rust template for writing Beacon Object Files (BOFs)☆128Feb 11, 2026Updated 5 months ago
- ☆10Dec 28, 2023Updated 2 years ago
- This is the PoC of a dynamic lifter and deobfuscator with collecting trace.☆37Oct 11, 2023Updated 2 years ago
- Abusing DDMA alongside Copy On Write for Cross Process Code Execution for a 3000$ Bug Bounty☆99Feb 1, 2026Updated 5 months ago