bootkit 开源项目推荐（65 个）

Mattiwatti /EfiGuard

Disable PatchGuard and Driver Signature Enforcement at boot time

ExpLife0011 /awesome-windows-kernel-security-development

windows kernel security development

Push3AX /GrabAccess

Bootkit / Windows Login Password Bypass Tool

memN0ps /redlotus-rs

Rusty Bootkit - Windows UEFI Bootkit in Rust (Codename: RedLotus)

memN0ps /illusion-rs

Rusty Hypervisor - Windows UEFI Blue Pill Type-1 Hypervisor in Rust (Codename: Illusion)

TheMalwareGuardian /Awesome-Bootkits-Rootkits-Development

A curated compilation of extensive resources dedicated to bootkit and rootkit development.

iss4cf0ng /OpenPetya

A Proof-of-Concept bootkit and UEFI boot application inspired by Petya ransomware, written in Assembly, C, and C++

Idov31 /Silverseal

Silverseal is an open-source Linux bootkit and rootkit framework written in Rust, using UEFI and early kernel boot hooks to load a stealthy kernel rootkit.

TheMalwareGuardian /Abyss

The first publicly shared complete Windows UEFI bootkit framework for automated Ring0 rootkit deployment and APT emulation

3a1 /Elysium

UEFI Bootkit Framework that attacks boot-time Code Integrity

AxtMueller /Windows-Batch-Deployment

A programmable and rootkit-like Windows remote access tool.

3a1 /Calypso

UEFI Bootkit with user-mode communication

xsh3llsh0ck /Deadwing

SMM driver/rootkit for platform memory access with R3 <-> R0 <-> R-2 communication.

cutecatsandvirtualmachines /Sputnik

The sequel to Voyager

ANSSI-FR /bootcode_parser

A boot record parser that identifies known good signatures for MBR, VBR and IPL.

DErDYAST1R /EfiGuardUsermodeLoader

This is an EfiGuard BootLoader that can boot EfiGuard from Usermode with no USB or Setup as a Single Executable with automatic File Dumping using Bytes.

nukIeer /stuxnet

Malicious computer worm Stuxnet and drivers

ng-dst /flashable-android-rootkit

Persistent backdoor for Android devices with unlocked bootloader. Runs as root in unrestricted SELinux context and can hide itself from anything except root

mrexodia /EfiCMake

CMake template for a basic EFI application/bootkit. This library is header-only, there is no EDK2 runtime!).

DarxiSR /CRYLINE-v5.0

Cryline project - It's a simple test ransomware for Windows OS without stable encryption. Pls use this source code for study purposes only. The author is't responsible for your actions.