EfiGuard

概述 EfiGuard 是一款便携式 x64 UEFI 启动工具包（bootkit），可在启动时修补 Windows 启动管理器、启动加载器和内核，以禁用 PatchGuard 和驱动程序签名强制（DSE）。 如果你只是想尝试 EfiGuard，请跳到使用。 功能特性 目前支持自 Vista SP1 至 Windows 11 所有已发布的与 EFI 兼容的 Windows x64 版本。 易于使用：可通过 U 盘或 Windows EFI 分区启动，加载器会自动查找并启动 Windows。驱动程序也可通过 UEFI Shell 或加载器手动加载和配置。 大量使用 Zydis...

Stryker

Stryker Herramienta de prueba de concepto multipropósito basada en CPU-Z CVE-2017-15303 Requisitos del sistema x64 Windows 7/8/8.1/10; Stryker diseñado solo para x64 Windows; Se requieren privilegios de administrador. Características Anulador de la aplicación de firmas de controladores similar a...

CVE-2026-21709

A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement...

CVE-2026-21709

A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement...

CVE-2026-21709

A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement...

CVE-2026-21709

CVE-2026-21709 describes a local-privilege-elevation bypass of Windows Driver Signature Enforcement. Public references in the initial data (NVD) and multiple security feeds confirm a local attacker with administrator privileges can bypass driver signing requirements, with CVSS v3.1 metrics indica...

Researchers Uncover OS Downgrade Vulnerability Targeting Microsoft Windows Kernel

A new attack technique could be used to bypass Microsoft's Driver Signature Enforcement DSE on fully patched Windows systems, leading to operating system OS downgrade attacks. "This bypass allows loading unsigned kernel drivers, enabling attackers to deploy custom rootkits that can neutralize...

New WinTapix.sys Malware Engages in Multi-Stage Attack Across Middle East

An unknown threat actor has been observed leveraging a malicious Windows kernel driver in attacks likely targeting the Middle East since at least May 2020. Fortinet Fortiguard Labs, which dubbed the artifact WINTAPIX WinTapix.sys, attributed the malware with low confidence to an Iranian threat...

Exploit for Code Injection in Watchdog Anti-Virus

CVE-2022-42045 Summary We discovered an Arbitrary code in...

Researchers Discover UEFI Bootkit Targeting Windows Computers Since 2012

Cybersecurity researchers on Tuesday revealed details of a previously undocumented UEFI Unified Extensible Firmware Interface bootkit that has been put to use by threat actors to backdoor Windows systems as early as 2012 by modifying a legitimate Windows Boot Manager binary to achieve persistence...