bootkit

windows kernel security development

Disable PatchGuard and DSE at boot time

A programmable and rootkit-like Windows remote access tool.

A boot record parser that identifies known good signatures for MBR, VBR and IPL.

CMake template for a basic EFI application/bootkit. This library is header-only, there is no EDK2 runtime!).

Cryline project - It's a simple ransomware for Windows OS

Compact MBR Bootkit for Windows

Stuxnet is an extremely sophisticated computer worm that exploits multiple previously unknown Windows zero-day vulnerabilities to infect computers and spread. Its purpose was not just to infect PCs but to cause real-world physical effects. Specifically, it targets centrifuges used to produce the enriched uranium that powers nuclear weapons and r…

2022 Updated Kernelmode-Code

LOJAX ROOTKIT (UEFI) +PDF Included[x]

A UEFI Application that hooks SetVariable to allow a user-space program to access kernel memory.

A LKM (Loadable Kernel Module) to execute a command as root; I include a example of using netcat and a compiled(with source and steps on how to compile) reverse shell provided in C.

HSLIW-BOOTKIT - ⚠️ HSLIW is an Bootkit made at firmware level of a Disk. I made for some specific brands of SSD and HDD disks; and I am still hesitating to make this repo, but will redact anything that shouldn't be public. ⚠️

it crawl whole system copy and make zip files of given files type eg docx

CHIPSEC Modified - The real guide for Hardware Security Assessment Framework

My own 'collection' of windows rootkits.

Small and lightweight x86-64 VBR bootkit for research purposes