floesen/KExecDD

Windows 11 kernel research framework demonstrating DSE bypass on Windows 11 25H2 through boot-time execution. Loads unsigned drivers by surgically patching SeCiCallbacks via native subsystem. Includes anti-loop protection and dual-path architecture. Windows 11 25H2 driver signature enforcement bypass

Kernel Driver Utility

A concept of using a ROP chain paired with a WRMSR primitive to call kernel functions and map unsigned drivers through BYOVD (AmdTools64.sys)

A C++ based BYOVD (Bring Your Own Vulnerable Driver) security research and testing project. It supports kernel-level operations including privilege escalation, physical memory R/W, and removing process protection via vulnerable drivers

Abusing Some Defects in KSLD Ark driver

Universal PatchGuard and Driver Signature Enforcement Disable

A basic implementation of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.

Execute PowerShell code at the antimalware-light protection level.

Exploitation of echo_driver.sys