R41N3RZUF477/ps-ppl-bypass

A C++ based BYOVD (Bring Your Own Vulnerable Driver) security research and testing project. It supports kernel-level operations including privilege escalation, physical memory R/W, and removing process protection via vulnerable drivers

Process Impairment Exploit Chain.

Protected Process Dumper Tool

Kernel mode WinDbg extension and PoCs for token privilege investigation.

Proof of Concept for Process Code Injection Without Using WriteProcessMemory

Defeating Windows User Account Control

Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.

Kernel Driver Utility