AlphaUncommon
wesmar/kvc
KVC enables unsigned driver loading via DSE bypass (g_CiOptions patch, skci.dll hijack, SeCiCallbacks redirection) and PP/PPL manipulation for LSASS memory dumping on modern Windows with HVCI/VBS.
- Owner
- wesmar (personal account)
- Stars
- Stars: 339
- Forks
- Forks: 60
- Language
- C++
- License
- None
- Created
- 2025
- Topics
- bypass-dse-load-unsigned-driver-windows11disable-windows-defender-tamper-protectiondriver-signature-enforcement-bypass-hvci-windowsdump-lsass-memory-protected-process-lightkernel-driver-stealth-loadingprotected-process-light-ppl-wintcb-bypasssecureboot-disable-unsigned-driver-loadunprotect-process-ppl-wintcbwindows-watermark-removal-toolpatchguard-safe-dse-bypass
- Tier
- Alpha (250 to 699 ★) What this tier means
More repos by wesmar
All 2 repos by wesmar- wesmar/KernelResearchKitStars: 286CAlpha
Nearby in C++
All C++ repos- jizhang-cmu/autonomy_stack_mecanum_wheel_platformStars: 339C++Alpha
- fuwei007/Navbot-EN01Stars: 339C++Alpha
- ghostmkg/dsa-codeStars: 339C++Alpha
- openstreetmap/merkaartorStars: 339C++Alpha
- LADSoft/OrangeCStars: 339C++Alpha
- googlearchive/tango-examples-cStars: 339C++Alpha