patchguard

Disable PatchGuard and Driver Signature Enforcement at boot time

Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.

Universal PatchGuard and Driver Signature Enforcement Disable

InfinityHookPro Win7 -> Win11 latest

Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard

x64 Windows PatchGuard bypass, register process-creation callbacks from unsigned code

Windows 11 24H2 Runtime PatchGuard Bypass

Kernel Level NMI Callback Blocker

InfinityHook 支持Win7 到 Win11 最新版本，虚拟机环境及物理机环境

DSE & PG bypass via BYOVD attack

A Vulnerable PatchGuard Exploit that can be used to disable PatchGuard on Runtime.

runtime patchguard disabler (win 10 & 11)

EPROCESS Unlinking example in "C" using DKOM Manipulation

The stress testing of your PG bypass [old school project]

A single byte modification in the kernel memory bypasses and disables all core functions of the AV/EDR security solutions

Anti-Rootkit

Kairos is a next-generation, red-team-oriented Windows kernel defense neutralization framework. It combines traditional runtime patching with UEFI persistence, hypervisor-level surveillance, and Secure Kernel deception.

22h2 Windows patchguard runtime disabler.

Small modifications from BugChecker, build a KDCOM.dll to lure the Windows Kernel into believing that it is beeing debugged to deactivate PatchGuard

PsLoadedModuleList Unlinking through DKOM Manipulation