Bypass Credential Guard by patching WDigest.dll using only NTAPI functions
-
Updated
Apr 8, 2025 - C++
Bypass Credential Guard by patching WDigest.dll using only NTAPI functions
Disable VBS, HVCI & Device Guard on Windows 11 24H2/25H2 — Fix VMware Workstation "Virtualized Intel VT-x/EPT" & enable CPL0 mode. One-command PowerShell script with auto-elevation, system restore, and auto-verification. 95%+ success rate.
By manipulating LSASS memory flags like UseLogonCredential and IsCredGuardEnabled, this repo demonstrates how Credential Guard can be bypassed—restoring cleartext credentials despite the protection appearing active. Requires SYSTEM-level access and targets VBS-based defenses.
PowerShell scripts for auditing ASD Essential Eight hardening controls on Windows hosts
How modern Windows builds a verifiable chain of trust from silicon to cloud, and where attackers break it. An open, evidence-based technical book (mdBook).
C++ Credential Guard status checker for credential isolation validation
Disable VBS on Windows 11 (24H2/25H2) to enhance performance and enable VMware Workstation CPL0 mode safely and efficiently.
To associate your repository with the credential-guard topic, visit your repo's landing page and select "manage topics."