bootkit

Disable PatchGuard and Driver Signature Enforcement at boot time

windows kernel security development

Bootkit / Windows Login Password Bypass Tool

Rusty Bootkit - Windows UEFI Bootkit in Rust (Codename: RedLotus)

Rusty Hypervisor - Windows UEFI Blue Pill Type-1 Hypervisor in Rust (Codename: Illusion)

A curated compilation of extensive resources dedicated to bootkit and rootkit development.

A Proof-of-Concept bootkit and UEFI boot application inspired by Petya ransomware, written in Assembly, C, and C++

The first publicly shared complete Windows UEFI bootkit framework for automated Ring0 rootkit deployment and APT emulation

UEFI Bootkit Framework that attacks boot-time Code Integrity

A programmable and rootkit-like Windows remote access tool.

UEFI Bootkit with user-mode communication

SMM driver/rootkit for platform memory access with R3 <-> R0 <-> R-2 communication.

The sequel to Voyager

A boot record parser that identifies known good signatures for MBR, VBR and IPL.

CMake template for a basic EFI application/bootkit. This library is header-only, there is no EDK2 runtime!).

Malicious computer worm Stuxnet and drivers

This is an EfiGuard BootLoader that can boot EfiGuard from Usermode with no USB or Setup as a Single Executable with automatic File Dumping using Bytes.

Persistent backdoor for Android devices with unlocked bootloader. Runs as root in unrestricted SELinux context and can hide itself from anything except root

Cryline project - It's a simple test ransomware for Windows OS without stable encryption. Pls use this source code for study purposes only. The author is't responsible for your actions.

Compact MBR Bootkit for Windows