A library to develop kernel level Windows payloads for post HVCI era

PC firmware exploitation tool and library

Kernel Level NMI Callback Blocker

"Bypassing" HVCI via donor PFN swaps to modify read-only code pages. Call chained kernel functions (kCET and SLAT support), modify read-only code pages, and more.

Demonstrate calling a kernel function and handle process creation callback against HVCI

How to disable VBS/HVCI to increase Performance in Windows-11

windows 10 & 11 patchguard & hvci compatible syscall hook

Disable VBS, HVCI & Device Guard on Windows 11 24H2/25H2 — Fix VMware Workstation "Virtualized Intel VT-x/EPT" & enable CPL0 mode. One-command PowerShell script with auto-elevation, system restore, and auto-verification. 95%+ success rate.

PowerShell tool for assessing and applying Windows side-channel vulnerability mitigations (Spectre, Meltdown, L1TF, MDS, etc.) with platform-aware scoring

Disable VBS on Windows 11 (24H2/25H2) to enhance performance and enable VMware Workstation CPL0 mode safely and efficiently.