patchguard

Disable PatchGuard and Driver Signature Enforcement at boot time

Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.

Universal PatchGuard and Driver Signature Enforcement Disable

InfinityHookPro Win7 -> Win11 latest

Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard

Windows 11 24H2-25H2 Runtime PatchGuard Bypass

x64 Windows PatchGuard bypass, register process-creation callbacks from unsigned code

Kernel Level NMI Callback Blocker

InfinityHook 支持Win7 到 Win11 最新版本，虚拟机环境及物理机环境

DSE & PG bypass via BYOVD attack

A single byte modification in the kernel memory bypasses and disables all core functions of the AV/EDR security solutions

fyyre.l2-fashion.de .. old site

Blocks PatchGuard routines by intercepting their exceptions through shadow-mapped physical page hooks.

The stress testing of your PG bypass [old school project]

EPROCESS Unlinking example in "C" using DKOM Manipulation

PsLoadedModuleList Unlinking through DKOM Manipulation

Demonstration code for intercepting and disabling NMI handling on Intel CPUs in Windows kernel mode.

Small modifications from BugChecker, build a KDCOM.dll to lure the Windows Kernel into believing that it is beeing debugged to deactivate PatchGuard

Bypassing PatchGuard at Runtime - Windows 11 25H2

Automatic EfiGuard build using Github Action with replacing GUID, VARIABLE NAME and COOKIE.