patchguard

Disable PatchGuard and Driver Signature Enforcement at boot time

Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.

Universal PatchGuard and Driver Signature Enforcement Disable

InfinityHookPro Win7 -> Win11 latest

Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard

x64 Windows PatchGuard bypass, register process-creation callbacks from unsigned code

Kernel Level NMI Callback Blocker

InfinityHook 支持Win7 到 Win11 最新版本，虚拟机环境及物理机环境

DSE & PG bypass via BYOVD attack

A Vulnerable PatchGuard Exploit that can be used to disable PatchGuard on Runtime.

The stress testing of your PG bypass [old school project]

EPROCESS Unlinking example in "C" using DKOM Manipulation

Anti-Rootkit

A single byte modification in the kernel memory bypasses and disables all core functions of the AV/EDR security solutions

PsLoadedModuleList Unlinking through DKOM Manipulation

Kairos is a next-generation, red-team-oriented Windows kernel defense neutralization framework. It combines traditional runtime patching with UEFI persistence, hypervisor-level surveillance, and Secure Kernel deception.